EventLog 1073 when trying to Restart, shutdown or logoff

[Guest Scott]

Whenever I try to Restart, shutdown or logoff the machine refuses to react

and always leaves a system eventlog of 1073, which really doesn't tell me

much.

 

At the same time there is a Security log that seems to be releated:

 

Object Open:

Object Server: SC Manager

Object Type: SC_MANAGER OBJECT

Object Name: ServicesActive

Handle ID: -

Operation ID: {0,95604}

Process ID: 948

Image File Name: C:\WINDOWS\system32\services.exe

Primary User Name: SCOTT-C$

Primary Domain: NORSOFT

Primary Logon ID: (0x0,0x3E7)

Client User Name: NETWORK SERVICE

Client Domain: NT AUTHORITY

Client Logon ID: (0x0,0x3E4)

Accesses: DELETE

READ_CONTROL

WRITE_DAC

WRITE_OWNER

Connect to service controller

Create a new service

Enumerate services

Lock service database for exclusive access

Query service database lock state

Set last-known-good state of service database

 

Privileges: -

Restricted Sid Count: 0

 

This seems to indicate some type of security error. The account for SCOTT-C$

is the machine account in the domain.

 

This started after installing XP/SP3. After the initial SP3 reboot I needed

to rejoin the computer in the domain, then it asked to reactivate windows.

 

I have removed this computer from the domain and put it back. Doesn't seem

to have any effect. Everything seems to work OK other than this. I can force

a shutdown, but that isn't much better than hitting the power switch.

 

Anyway, I am at a loss, any ideas?

 

--

Scott