New
#1
Random System Restarts
Having some really strange random system reboots since doing a clean install of Windows 10.
Everything is up to date in terms of system updates.
All my hardware drivers are up to date as well.
It happened just now, where I was just browsing the internet, and all of a sudden without any warning, the system rebooted.
I've been looking at the event logs to try and figure out what's going on, but I'm not sure how to move forward with some of the entries, or even if they are the cause.
This is the most recent critical system log
Log Name: System
Source: Microsoft-Windows-Kernel-Power
Date: 06/07/2016 08:36:14
Event ID: 41
Task Category: (63)
Level: Critical
Keywords: (70368744177664),(2)
User: SYSTEM
Computer: Server
Description:
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />
<EventID>41</EventID>
<Version>3</Version>
<Level>1</Level>
<Task>63</Task>
<Opcode>0</Opcode>
<Keywords>0x8000400000000002</Keywords>
<TimeCreated SystemTime="2016-07-06T07:36:14.252890100Z" />
<EventRecordID>2412</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="8" />
<Channel>System</Channel>
<Computer>Server</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="BugcheckCode">0</Data>
<Data Name="BugcheckParameter1">0x0</Data>
<Data Name="BugcheckParameter2">0x0</Data>
<Data Name="BugcheckParameter3">0x0</Data>
<Data Name="BugcheckParameter4">0x0</Data>
<Data Name="SleepInProgress">0</Data>
<Data Name="PowerButtonTimestamp">0</Data>
<Data Name="BootAppStatus">0</Data>
</EventData>
</Event>
If I look at the timestamp for just before the reboot, I get the following Error Level log
Log Name: System
Source: Microsoft-Windows-DistributedCOM
Date: 06/07/2016 08:33:20
Event ID: 10016
Task Category: None
Level: Error
Keywords: Classic
User: SERVER\chris
Computer: Server
Description:
The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID
{C2F03A33-21F5-47FA-B4BB-156362A2F239}
and APPID
{316CDED5-E4AE-4B15-9113-7055D84DCC97}
to the user SERVER\chris SID (S-1-5-21-35390013-3182908663-586117655-1001) from address LocalHost (Using LRPC) running in the application container Microsoft.Windows.FeatureOnDemand.InsiderHub_10.0.10586.0_neutral_neutral_cw5n1h2txyewy SID (S-1-15-2-4016783169-893401051-2237370320-274899566-412088533-2398988950-2155762795). This security permission can be modified using the Component Services administrative tool.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
<EventID Qualifiers="0">10016</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2016-07-06T07:33:20.445891400Z" />
<EventRecordID>2393</EventRecordID>
<Correlation />
<Execution ProcessID="920" ThreadID="6120" />
<Channel>System</Channel>
<Computer>Server</Computer>
<Security UserID="S-1-5-21-35390013-3182908663-586117655-1001" />
</System>
<EventData>
<Data Name="param1">machine-default</Data>
<Data Name="param2">Local</Data>
<Data Name="param3">Activation</Data>
<Data Name="param4">{C2F03A33-21F5-47FA-B4BB-156362A2F239}</Data>
<Data Name="param5">{316CDED5-E4AE-4B15-9113-7055D84DCC97}</Data>
<Data Name="param6">SERVER</Data>
<Data Name="param7">chris</Data>
<Data Name="param8">S-1-5-21-35390013-3182908663-586117655-1001</Data>
<Data Name="param9">LocalHost (Using LRPC)</Data>
<Data Name="param10">Microsoft.Windows.FeatureOnDemand.InsiderHub_10.0.10586.0_neutral_neutral_cw5n1h2txye wy</Data>
<Data Name="param11">S-1-15-2-4016783169-893401051-2237370320-274899566-412088533-2398988950-2155762795</Data>
</EventData>
</Event>
I really don't understand everything in that though or how it relates, if at all.
Help needed
Quote
