Unexpected shutdown of all workstations
We had a number of machines sudenly shutdown this morning. We traced the shutdown.exe command back to to the Kace agent. But cant see any scedualed scripts or run-now scripts that have been run today.
Is there some place else to look for commands send to endpoints from the K1000?
Is there some place else to look for commands send to endpoints from the K1000?
1 Comment
[ + ] Show comment
-
Curious how you were able to trace it to the KACE Agent?? Could be good to know for others. Event Viewer? - nheyne 8 years ago
Answers (3)
Please log in to answer
Posted by:
BHC-Austin
8 years ago
If you have any scripts that use the shutdown.exe command, open those scripts and click the "Show All History" link in the upper right. That should show you if they were run at all, even if they don't show on the Run Now Status page.
You may also want to double check your patching schedules, to see if any coincide with the shutdown event. That would be a bit unusual, though, since patches typically only do a restart (if configured to), not a shutdown.
Posted by:
Wonderly.N
8 years ago
I am experiencing this same situation. If the above two suggestion do not produce any results, what else can I look to see why this is happening? Thanks for your help. Nancy Wonderly