Windows server 2003 unexpected reboot

[Roberto R]

Do anyone know what would cause the server to reboot with the error below:

Event Type: Information
Event Source: USER32
Event Category: None
Event ID: 1074
Date: 7/31/2008
Time: 11:14:58 AM
User: NT AUTHORITY\SYSTEM
Computer: AGI-NY15
Description:
The process winlogon.exe has initiated the restart of computer AGI-NY15 on
behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for
this reason could be found
Reason Code: 0x80020002
Shutdown Type: restart
Comment:

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 02 00 02 80 ...€

[Luis]

Hi Roberto,

This error code is typically caused by an incorrect registry key. We can
take the
following steps to get this issue resolved:

1. Click Start.
2. Choose Run.
3. In the Open box, type regedit.
4. Click OK.
5. In the Registry Editor, go to the following branch:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto
Update
6. If the RebootRequired sub-key is present, right click on the key and then
click
on the Delete option. Click Yes for confirmation.
7. Close Windows Registry, restart the computer.

Hope this helps,

Luis.


"Roberto R" <RobertoR@discussions.microsoft.com> wrote in message
news:361DCE11-1AB4-4DF0-9E34-4FA4D324167D@microsoft.com...
> Do anyone know what would cause the server to reboot with the error below:
>
> Event Type: Information
> Event Source: USER32
> Event Category: None
> Event ID: 1074
> Date: 7/31/2008
> Time: 11:14:58 AM
> User: NT AUTHORITY\SYSTEM
> Computer: AGI-NY15
> Description:
> The process winlogon.exe has initiated the restart of computer AGI-NY15 on
> behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for
> this reason could be found
> Reason Code: 0x80020002
> Shutdown Type: restart
> Comment:
>
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
> Data:
> 0000: 02 00 02 80 ...€
>

[Roberto R]

I checked for that registry key, however it was not present. Any other ideas?
thanks

"Luis" wrote:

> Hi Roberto,
>
> This error code is typically caused by an incorrect registry key. We can
> take the
> following steps to get this issue resolved:
>
> 1. Click Start.
> 2. Choose Run.
> 3. In the Open box, type regedit.
> 4. Click OK.
> 5. In the Registry Editor, go to the following branch:
> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto
> Update
> 6. If the RebootRequired sub-key is present, right click on the key and then
> click
> on the Delete option. Click Yes for confirmation.
> 7. Close Windows Registry, restart the computer.
>
> Hope this helps,
>
> Luis.
>
>
> "Roberto R" <RobertoR@discussions.microsoft.com> wrote in message
> news:361DCE11-1AB4-4DF0-9E34-4FA4D324167D@microsoft.com...
> > Do anyone know what would cause the server to reboot with the error below:
> >
> > Event Type: Information
> > Event Source: USER32
> > Event Category: None
> > Event ID: 1074
> > Date: 7/31/2008
> > Time: 11:14:58 AM
> > User: NT AUTHORITY\SYSTEM
> > Computer: AGI-NY15
> > Description:
> > The process winlogon.exe has initiated the restart of computer AGI-NY15 on
> > behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for
> > this reason could be found
> > Reason Code: 0x80020002
> > Shutdown Type: restart
> > Comment:
> >
> > For more information, see Help and Support Center at
> > http://go.microsoft.com/fwlink/events.asp.
> > Data:
> > 0000: 02 00 02 80 ...€
> >
>
>
>

[Pezad]

Hi Luis,
We've had the same problem on our server.
When I checked the Rededit:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update
There was no RebootRequired sub-key present
But there was a ForcedReboot 'REG_DWORD'
Could this be the problem? If this ForcedReboot is deleted would it stop
forcing a reboot after an auto update when required?
Pezad


"Roberto R" wrote:

> Do anyone know what would cause the server to reboot with the error below:
>
> Event Type: Information
> Event Source: USER32
> Event Category: None
> Event ID: 1074
> Date: 7/31/2008
> Time: 11:14:58 AM
> User: NT AUTHORITY\SYSTEM
> Computer: AGI-NY15
> Description:
> The process winlogon.exe has initiated the restart of computer AGI-NY15 on
> behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for
> this reason could be found
> Reason Code: 0x80020002
> Shutdown Type: restart
> Comment:
>
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
> Data:
> 0000: 02 00 02 80 ...€
>

[Jeffrey]

I just had this same thing happen to me. About 11:09 am in the event log. We
use WSUS here but this is our ISA server which is configured for manual
updating. No entries in the log say any updates were applied, just this
random USER32 message with a useless error code. Can anyone help with this?
Thanks.

"Roberto R" wrote:

> Do anyone know what would cause the server to reboot with the error below:
>
> Event Type: Information
> Event Source: USER32
> Event Category: None
> Event ID: 1074
> Date: 7/31/2008
> Time: 11:14:58 AM
> User: NT AUTHORITY\SYSTEM
> Computer: AGI-NY15
> Description:
> The process winlogon.exe has initiated the restart of computer AGI-NY15 on
> behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for
> this reason could be found
> Reason Code: 0x80020002
> Shutdown Type: restart
> Comment:
>
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
> Data:
> 0000: 02 00 02 80 ...€
>

[DanWalk]

Hello
Me too, I had the same problem.
By using Windows XP, I have the possibility to click "restart later". But
after a few hours/days without restarting the system, a countdown is started.
After the countdown has finished, the system restarts automatically.
So I like you to ask if it's possible that the server restarts itself
automatically after a few weeks without a manual restart, even if a GPO is
configured, that disable the automatic restart?

Greets and thanks
DanWalk

"Jeffrey" wrote:

> I just had this same thing happen to me. About 11:09 am in the event log. We
> use WSUS here but this is our ISA server which is configured for manual
> updating. No entries in the log say any updates were applied, just this
> random USER32 message with a useless error code. Can anyone help with this?
> Thanks.
>
> "Roberto R" wrote:
>
> > Do anyone know what would cause the server to reboot with the error below:
> >
> > Event Type: Information
> > Event Source: USER32
> > Event Category: None
> > Event ID: 1074
> > Date: 7/31/2008
> > Time: 11:14:58 AM
> > User: NT AUTHORITY\SYSTEM
> > Computer: AGI-NY15
> > Description:
> > The process winlogon.exe has initiated the restart of computer AGI-NY15 on
> > behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for
> > this reason could be found
> > Reason Code: 0x80020002
> > Shutdown Type: restart
> > Comment:
> >
> > For more information, see Help and Support Center at
> > http://go.microsoft.com/fwlink/events.asp.
> > Data:
> > 0000: 02 00 02 80 ...€
> >

[Kuldeep]

both key are not present in registry then what we should do?

[carmenchacha]

My computer keeps restarting. I have looked at the event codes but I believe they are just showing what happens aafter the reboot. However I did see this:

The COM sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\Ole\EventLog.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

SHould I go the registry and apply the above to try and remedy this?