Force Reboot Really Force Rebooting!
After running patch jobs where the force reboot option is selected, we get notified via SCOM on several servers msgs like: " The previous system shutdown at 5:13:21 PM on
12/4/2018 was unexpected"
. This would mean I assume the machine was not shut down clean. On some of these servers when you log in a window pops up asking you to enter a reason the computer was forced to shut down. So is KACE really forcing a reboot this way and is there any way to stop these dirty shut downs? Of course leaving the option of no reboot means someone has to go and reboot it then. For the most part, machines appear to shut down cleanly but these forced reboots are getting attention and people are complaining.
Community Chosen Answer
Unexpected Shutdown simply means: It was not initiated by the user.
In the case of KACE it was initiated by the agent using the SYSTEM service.
The agent runs a "standard" shutdown /r, which safely ends all services and does a normal reboot.
Microsoft right now does not provide any other way to do this.
You can set a GPO to remove the message if the users don't understand the meaning of the popup.
The needed GPO is found under the Admin Templates: Display Shutdown Event Tracker
Answered 12/04/2018 by: