User executed "System Shutdown (1115)"

PainlessTorture

PainlessTorture

Official Best Member
Vista Pro
Hello members,
I wonder if anyone could tell me how a user could execute a command to begin a system shutdown (Event ID: 1115).

This is the type of shutdown windows executes when it encounters a critical error such as services.exe being killed. I cant find a way to execute it, even executing a shutdown command under the SYSTEM account doesn't seem to work.

I need it because once executed it cannot be aborted even by an admin (as far as i can see).

I need to be able to do it without causing an error though, and suggestions?

Thanks
 

My Computer

System One

  • Manufacturer/Model
    Hewlett Packard
    CPU
    3.40Ghz / 2.20Gz Duo Core
    Memory
    2GB / 3GB
    Hard Drives
    160 GB / 160 GB
Are you trying to shut down the system in a particular way, or perhaps attempting to track down who's causing the server to be shut down?

From the sounds of it, you're trying to "cause" something, but I'm not clear on the what and why. You want to terminate a critical process (winlogon, smss, csrss, lsass...) and you want the system to shut down, but without logging any errors?

Terminating any of those processes really is dangerous on a running system, not just because it leads to a reboot, obviously, but also because of the potential for user data corruption.

If you can clarify the situation someone might be able to help.
 

My Computer

System One

No no, I mean i want to be able to make the system shutdown as if something were killed but without killing anything. If you kill something important it wont let you abort the shutdown however if you start a shutdown yourself you can abort. I want it to be once you execute the shutdown command you cant abort. So maybe a 300 second shutdown countdown without the possibility of aborting.
 

My Computer

System One

  • Manufacturer/Model
    Hewlett Packard
    CPU
    3.40Ghz / 2.20Gz Duo Core
    Memory
    2GB / 3GB
    Hard Drives
    160 GB / 160 GB
if you have a timeout period you cant stop anyone aborting the shutdown , as far as i can see the /a command will always abort , i dont think you can prevent it.


edit..............sorry not read the question properly ignore me ;)
 
Last edited:

My Computer

System One

  • Manufacturer/Model
    Custom Build
    CPU
    Intel Q9550 @ 4Gig / Titan Fenir
    Motherboard
    XFX 780i
    Memory
    4GB OCZ PC2-8500C5 DDR2
    Graphics Card(s)
    Gainward GTX260/216 SLI
    Sound Card
    Creative X-FI Xtreme Gamer
    Monitor(s) Displays
    Dell UltraSharp 2209WA 22"
    Screen Resolution
    1680x1050
    Hard Drives
    western digital raptor 10000rpm sata
    PSU
    OCZ Modstream 700w
    Cooling
    Titan Fenir
    Keyboard
    Razer Reclusa
    Mouse
    Logitech G5 Gamer
    Internet Speed
    8mb
I'll bet it is :)

Sounds like you might be a budding l33+ /-/@XX0R. Careful. If the IT resources in question are not yours, and you're in effect attempting to DoS someone else that's also using the same server, you could be legally liable should they wish to string you up and make an example out of you.
 

My Computer

System One

H2SO4 said:
I'll bet it is :)

Sounds like you might be a budding l33+ /-/@XX0R. Careful. If the IT resources in question are not yours, and you're in effect attempting to DoS someone else that's also using the same server, you could be legally liable should they wish to string you up and make an example out of you.
Click to expand...

Lol dont worry its nothing illegal, well not really its my friend. Kinda have a war thing going on :p. I think its legal to break into your friends if he is ok with it isnt it?
 

My Computer

System One

  • Manufacturer/Model
    Hewlett Packard
    CPU
    3.40Ghz / 2.20Gz Duo Core
    Memory
    2GB / 3GB
    Hard Drives
    160 GB / 160 GB
You must log in or register to reply here.
Back
Top