You are about to be logged off windows has encountered a critical problem and will restart in one minute please save your work.

As soon as i turn on my laptop and log on i get this message and a minute later it restarts. This problem started randomly around 4 days ago, the only thing which i have installed within the last week is windows live which i have now uninstalled to no avail.

Not sure as to what i can do to fix this problem any help would be greatly appreciated.

Restore Point:

Do System Restore in Safe Mode, if unable to do it in Normal Mode.

Try tapping F8 at startup, and from the list of startup selections, select Safe Mode by using UP Arrow Key to go there > then hit Enter.

Try a System Restore once there, to pick a Restore Point before your problem..

Click Start > Programs > Accessories > System Tools > System Restore > pick a different time > Next > etc

Mick Murphy — Microsoft Partner

Was this reply helpful?

Sorry this didn’t help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

See if a Startup Repair will fix it.

If you only have a Recovery Disk. not a Microsoft Vista DVD, try this below

If a Microsoft Disk, use the instructions from below

Download the ISO file at the supplied link, and make a Bootable Startup Repair Disk from it.

Go into your Bios/Setup, or Boot Menu, at startup, and change the Boot Order to make the DVD/CD drive 1st in the Boot Order, then reboot with the disk in the Drive.

At startup/power on you should see at the bottom of the screen either F2 or DELETE, to go into Bios/Setup, or F12 for the Boot Menu.

When you have changed that, insert that Bootable Disk you have made in the Drive, and reboot.

Above link shows what the process looks like, and a how-to, as it loads to the Repair Options.

Neosmart contains the contents of the Windows Vista DVD’s «recovery center,» as we’ve come to refer to it. It cannot be used to install or reinstall Windows Vista, and just serves as a Windows PE interface to recovering your PC. Technically, one could re-create this installation media with freely-downloadable media from Microsoft (namely the Microsoft WAIK kit, a multi-gigabyte download); but it’s damn-decent of Microsoft to make this available to Windows’ users who might not be capable of creating such a thing on their own.

Read all info at the website about creating and using it .

It makes a very good Vista Startup Repair Disk.

You can do a Startup Repair, System Restore, etc from it.

It is NOT a reinstall disk.

And the 32bit is what comes normally on a computer, unless 64bits requested.

Error :»You are about to be logged off — Windows must now restart befause the Plug and Play service terminated unexpectedly.» when upgrading to Windows 8.

windows 8 upgrade from windows 7 — Upgrade Assistant crashes

In preparation to upgrade from Windows 7 to Windows 8 Pro, I downloaded and intiiated Upgrade Assistant. It failed and shut the system down with the following message: «You are about to be logged off — Windows must now restart befause the Plug and Play service terminated unexpectedly.»

As a casual user, I need to know what is happening and how to resolve that conflict before attempting to install Windows 8 Pro on my 64 bit syste,. Thanks for any help you can give.

Replies (1) 

Thank you for posting the query on Microsoft Community!

As I understand that you are facing issues upgrading to Windows 8 from windows 7 as the Upgrade Assistant fails giving an error «You are about to be logged off — Windows must now restart because the Plug and Play service terminated unexpectedly.»

The error might come up because of some hardware incompatibility.

Upgrade Assistant checks your PC hardware to see if it meets the Windows 8 system requirements to install on your PC, including features of the processor such as CPU speed, PAE, NX, and SSE2, as well as RAM size and hard disk capacity. It also checks for compatibility of your currently installed apps and devices.

Disconnect any external devices if connected to the computer except mouse and keyboard and then try running the upgrade assistant to see if the issue reoccurs.

Here are two great articles you want to spend some time on referring the same prior upgrading to windows 8 and make sure your system or computer meets the minimum system requirements. It has lot of information on upgrading to Windows 8:

Note:

You may try a Windows 8 installation DVD to install Windows 8 this way it would be easier.

Post back if you need further assistance on the same also feel free to post us if you have question on Windows.

You are about to be logged off. Windows has encountered a critical problem and will restart automatically in one minute. Please save your work now.

I purchased a Dell INSPIRON 1764 in 5/2010. Lap top Specs 2.27GHZ -2.00GB RAM -64 Bit — 300GB Hard Drive About 4 months a go I began to have issues where windows would show that it is shutting down. «You are about to be logged off. Windows has encountered a critical problem and will restart automatically in one minute. Please save your work now.» Now the frustration. I have heard that it is a virus, a software issue, hardware issue, and last but not least OBAMA CARE has taken over my laptop. I tried to repair windows, restore, check for viruses, and finally I gave up and here I am starting over.

I nuked the hard drive with Darik’s Boot & Nuke Beta 2.2.7

Then I followed it with one pass of KillDisk

I removed the internal battery for a couple of hours to flash the CMOS

Reloaded the Windows 7 OS ( Original software that came with the computer)

NO other programs are loaded at this point

I began to run «Windows Updates» the first update was 170 updates. In the middle of the process the message would appear «Windows has encountered a critical problem. the shutdown would restart the computer. I disabled the automatic restart but the shutdown and restart still occurred . Over several attempts (about 8 hours) I was able to load all of the recommended windows updates.

The only programs I have added to the computer is the free version of » Malwarebytes» anti-malware and the free version of «2014 AVG Anti Virus».

I ran a full scan with both programs and found nothing. My final attempt was running «Kaspersky Rescue Disk 10» and No Threats were found.

You are about to be logged off — Windows will shut down in 1 minute

The moment I bought my laptop (brand new and originally came with Windows 8) from a retail store, I went back home to upgrade it to Windows 10. From then on installed the usual things like Skype, Thunderbird and Chrome etc.

Then within a few hours a popup window will come up saying «You are about to be logged off — Windows will shut down in 1 minute» and I will have to restart the system afterwards to continue my work.

Tried to go back to the shop where I bought it from and they asked me to check the power settings and all seems to be down correctly.

Can anyone please guide me how to resolve this? It is affecting my productivity.

Replies (4) 

32 people found this reply helpful

Was this reply helpful?

Sorry this didn’t help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

Thank you for contacting Microsoft Community.

I suggest you to check whether the automatic restart option is disabled or not as below.

1. Press “Windows+X” and go to “Control Panel”.
2. Click on “System and Security” and click on “System”.
3. On the left hand side click on “Advanced system settings”.
4. Click on “Advanced” tab, then under “Startup and Recovery” click on “Settings”.
5. Under “System Failure” uncheck the option “Automatically Restart”.
6. Then click on “ok” and check whether the issue persist or not.

Also, I suggest you to check whether any task has been schedule for automatic restart as below.

1. In the search box type as “Task Scheduler”.
2. Under “Task Scheduler summary” you can find any task has been created or not.
3. If any task has been created then I suggest you to remove it and check if the issue persist or not.

To determine what is causing the issue, I suggest you to check the event logs in the event viewer logs to know more about the issue.

Try the following steps to access Event Viewer:

1. Press ‘Windows key + R’ simultaneously on your keyboard to bring the run dialog box.
2. Type ‘eventvwr’ (without quotes) and press ‘OK’.
3. Expand ‘Windows Logs’ on the left pane and look for the error logs under Application and System.
4. Copy the information and post it here so that we can analyze it.

Hope this information is helpful and do let us know if you need further assistance. We will be glad to assist.

43 people found this reply helpful

Was this reply helpful?

Sorry this didn’t help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

Thank you! I have completed the above first 2 steps. Will begin to monitor the computer see if it works.

Found repeated instances of logs with same event IDs so just copied one of each here.

Application Error Logs —

Log Name: Application
Source: Microsoft-Windows-WMI
Date: 19/2/2016 2:45:34 AM
Event ID: 24
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: user
Description:
Event provider attempted to register query «select * from CIntelQosEvent» whose target class «CIntelQosEvent» in //./root/DEFAULT namespace does not exist. The query will be ignored.
Event Xml:

24
2
2
0
0
0x8000000000000000

50

Application
user

select * from CIntelQosEvent
CIntelQosEvent
//./root/DEFAULT

Log Name: Application
Source: Bonjour Service
Date: 23/2/2016 11:06:19 AM
Event ID: 100
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: user
Description:
Local Hostname user.local already in use; will try user-2.local instead
Event Xml:

100
2
0
0x80000000000000

990
Application
user

Local Hostname user.local already in use; will try user-2.local instead

Log Name: Application
Source: DPTF
Date: 19/2/2016 2:35:31 AM
Event ID: 256
Task Category: GENERAL
Level: Error
Keywords: Classic
User: N/A
Computer: user
Description:
Intel(R) Dynamic Platform and Thermal Framework : ESIF(8.0.10100.71) TYPE: ERROR FUNC: esif_send_dsp FILE: esif_uf_dsp.c LINE: 103

esif_send_dsp: file not found (C:\Program Files (x86)\Intel\Intel(R) Dynamic Platform and Thermal Framework\dsp\shb_pch.edp)
Event Xml:

256
2
1
0x80000000000000

12
Application
user

Intel(R) Dynamic Platform and Thermal Framework
ESIF(8.0.10100.71) TYPE: ERROR FUNC: esif_send_dsp FILE: esif_uf_dsp.c LINE: 103

esif_send_dsp: file not found (C:\Program Files (x86)\Intel\Intel(R) Dynamic Platform and Thermal Framework\dsp\shb_pch.edp)

Log Name: Application
Source: Microsoft-Windows-CAPI2
Date: 20/2/2016 4:06:42 PM
Event ID: 513
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: user
Description:
Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object.

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft Link-Layer Discovery Protocol.

System Error:
Access is denied.
.
Event Xml:

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft Link-Layer Discovery Protocol.

System Error:
Access is denied.

Log Name: Application
Source: Application Error
Date: 16/3/2016 5:09:50 PM
Event ID: 1000
Task Category: (100)
Level: Error
Keywords: Classic
User: N/A
Computer: user
Description:
Faulting application name: Recorder.exe, version: 3.1.0.0, time stamp: 0x54e728cc
Faulting module name: MSVCR100.dll, version: 10.0.40219.325, time stamp: 0x4df2be1e
Exception code: 0xc0000417
Fault offset: 0x0008af3e
Faulting process id: 0x61c
Faulting application start time: 0x01d17f4a5731692a
Faulting application path: C:\Program Files\CamStudio 2.7\Recorder.exe
Faulting module path: C:\WINDOWS\SYSTEM32\MSVCR100.dll
Report Id: 3396436d-5b18-4241-aef9-63d91c2b5be8
Faulting package full name:
Faulting package-relative application ID:
Event Xml:

1000
2
100
0x80000000000000

4666
Application
user

Recorder.exe
3.1.0.0
54e728cc
MSVCR100.dll
10.0.40219.325
4df2be1e
c0000417
0008af3e
61c
01d17f4a5731692a
C:\Program Files\CamStudio 2.7\Recorder.exe
C:\WINDOWS\SYSTEM32\MSVCR100.dll
3396436d-5b18-4241-aef9-63d91c2b5be8

Log Name: Application
Source: Application Hang
Date: 15/3/2016 3:40:50 PM
Event ID: 1002
Task Category: (101)
Level: Error
Keywords: Classic
User: N/A
Computer: user
Description:
The program explorer.exe version 10.0.10586.104 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.
Process ID: 34c
Start Time: 01d17e5d4364905d
Termination Time: 0
Application Path: C:\Windows\explorer.exe
Report Id: 1725d3cd-ea68-11e5-82f3-14dda94250c7
Faulting package full name:
Faulting package-relative application ID:

1002
2
101
0x80000000000000

4539
Application
user

explorer.exe
10.0.10586.104
34c
01d17e5d4364905d
0
C:\Windows\explorer.exe
1725d3cd-ea68-11e5-82f3-14dda94250c7

430072006F00730073002D00700072006F00630065007300730000000000

Log Name: Application
Source: Microsoft-Windows-Perflib
Date: 20/3/2016 7:56:43 PM
Event ID: 1008
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: user
Description:
The Open Procedure for service «BITS» in DLL «C:\Windows\System32\bitsperf.dll» failed. Performance data for this service will not be available. The first four bytes (DWORD) of the Data section contains the error code.
Event Xml:

Log Name: Application
Source: Microsoft-Windows-MSDTC Client 2
Date: 19/2/2016 2:43:07 AM
Event ID: 4104
Task Category: Cluster
Level: Error
Keywords: Classic
User: N/A
Computer: user
Description:
Failed trying to get the state of the cluster node: .The error code returned: 0x8007085A
Event Xml:

Log Name: Application
Source: Microsoft-Windows-Immersive-Shell
Date: 25/2/2016 7:02:01 PM
Event ID: 5973
Task Category: (5973)
Level: Error
Keywords:
User: user\asus
Computer: user
Description:
Activation of app Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy!App failed with error: The app didn’t start. See the Microsoft-Windows-TWinUI/Operational log for additional information.
Event Xml:

5973
0
2
5973
0
0x2000000000000000

1475

Application
user

Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy!App
-2144927141

System Error Logs —

Log Name: System
Source: Microsoft-Windows-DistributedCOM
Date: 19/3/2016 9:51:37 PM
Event ID: 10010
Task Category: None
Level: Error
Keywords: Classic
User: user\asus
Computer: user
Description:
The server did not register with DCOM within the required timeout.
Event Xml:

Log Name: System
Source: Service Control Manager
Date: 20/3/2016 7:50:31 PM
Event ID: 7031
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: user
Description:
The Sync Host_3e3bf service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 10000 milliseconds: Restart the service.
Event Xml:

7031
0
2
0
0
0x8080000000000000

6190

System
user

Sync Host_3e3bf
1
10000
1
Restart the service
4F006E006500530079006E0063005300760063005F00330065003300620066000000

Log Name: System
Source: Microsoft-Windows-DistributedCOM
Date: 20/3/2016 7:50:31 PM
Event ID: 10016
Task Category: None
Level: Error
Keywords: Classic
User: SYSTEM
Computer: user
Description:
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID

and APPID
<9ca88ee3-acb7-47c8-afc4-ab702511c276>
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
Event Xml: