Unexpected shutdown of all workstations

We had a number of machines sudenly shutdown this morning. We traced the shutdown.exe command back to to the Kace agent. But cant see any scedualed scripts or run-now scripts that have been run today.

Is there some place else to look for commands send to endpoints from the K1000?

1 Comment   [ + ] Show comment
  • Curious how you were able to trace it to the KACE Agent?? Could be good to know for others. Event Viewer? - nheyne 5 years ago

Answers (3)

Posted by: SMal.tmcc 5 years ago
Red Belt
do you run a nightly shutdown script?
Posted by: BHC-Austin 5 years ago
4th Degree Black Belt

If you have any scripts that use the shutdown.exe command, open those scripts and click the "Show All History" link in the upper right. That should show you if they were run at all, even if they don't show on the Run Now Status page.

You may also want to double check your patching schedules, to see if any coincide with the shutdown event. That would be a bit unusual, though, since patches typically only do a restart (if configured to), not a shutdown.

Posted by: Wonderly.N 4 years ago
White Belt
I am experiencing this same situation. If the above two suggestion do not produce any results, what else can I look to see why this is happening? Thanks for your help. Nancy Wonderly

Don't be a Stranger!

Sign up today to participate, stay informed, earn points and establish a reputation for yourself!

Sign up! or login


This website uses cookies. By continuing to use this site and/or clicking the "Accept" button you are providing consent Quest Software and its affiliates do NOT sell the Personal Data you provide to us either when you register on our websites or when you do business with us. For more information about our Privacy Policy and our data protection efforts, please visit GDPR-HQ