We had a number of machines sudenly shutdown this morning. We traced the shutdown.exe command back to to the Kace agent. But cant see any scedualed scripts or run-now scripts that have been run today.

Is there some place else to look for commands send to endpoints from the K1000?
1 Comment   [ - ] Hide Comment


  • Curious how you were able to trace it to the KACE Agent?? Could be good to know for others. Event Viewer?
Please log in to comment

Answer this question or Comment on this question for clarity


do you run a nightly shutdown script?
Answered 03/15/2016 by: SMal.tmcc
Red Belt

Please log in to comment

If you have any scripts that use the shutdown.exe command, open those scripts and click the "Show All History" link in the upper right. That should show you if they were run at all, even if they don't show on the Run Now Status page.

You may also want to double check your patching schedules, to see if any coincide with the shutdown event. That would be a bit unusual, though, since patches typically only do a restart (if configured to), not a shutdown.

Answered 03/15/2016 by: BHC-Austin
Fourth Degree Black Belt

Please log in to comment
I am experiencing this same situation. If the above two suggestion do not produce any results, what else can I look to see why this is happening? Thanks for your help. Nancy Wonderly
Answered 04/13/2016 by: Wonderly.N
White Belt

Please log in to comment