Last week we have faced a strange issue, some random PC received popped up a screen inform the user that their PC going to shutdown after 10 seconds.
I have made my research on the server and on the community and I found this article: http://community.landesk.com/support/docs/DOC-6701
first of all we have landesk 10 and I am not very sure if that was a bug before on the landesk and then they fixed it or what.
Here is what I looked for:
I searched into ServiceHost.log on one of the users PC who got this message and I found some logs related to this operation but the problem is we don't know what is the cause from the first place!!
I got freaked out and I removed the power management policy that we were applying on all PCs and return it back to the default. however some user reports that they still receiving this silly message.
I have also looked into the daily, weekly tasks that run on the server but it seems there is no anything to do with this.
Where can I go and track this problem?
and is there is any kind of events or logs on the server where I can find useful information and logs about this problem and why it is happening.
Guys we need help, otherwise I will resign better than get fired!!
It does sound like the issue described in the document. Have you gone through every task? Is there anyone else in your environment that has the rights to schedule tasks? If so, perhaps notifying them all of this issue and the probable cause will 'magically' make it stop.
LANDesk Silver ESP
The One-Stop Shop for LANDesk Enhancements
Yeah, we have looked into all the tasks but I am not very sure which one of them is the guilty . I have searched inside that servicehost.log in one of the users who got effected from this and I found this line:
Exec: Exec: Launch request <"poweroff.exe" 10> (sync 0, timeout 300)
and before that line commend I found this as well:
Service Host Started, Host ********, Peer **.**.**.***, IP Address **.**.**.***,
Public key path C:\Program Files\LANDesk\Shared Files\cbaroot\certs
X509 Authentication via 76b9ae97
Request Received "POST /services/exec HTTP/1.1"
Not very sure if this a normal behavior before the PC got the shutdown command. I have searched in many logs but nothing was pretty clear which task has ordered the PC to shutdown.
But I have noticed very intersting thing in sdclient_task.log. take a look on this line:
1088: Service shutdown has been requested, setting shutdown event
Do you think it has something to do with that issue, or this is just a service is shutting down?