It doesn't happen on every shutdown, I can't tell what triggers it. It doesn't seem to hang up the computer or slow the shutdown process, but it happens occasionally on every computer in the domain.
We have this event ID 7043 as well.
Doesn't happen on every type of workstation.
Any hint on the direction we should dive into ?
Thank you for your post.
@ozzium I have just noticed this post and I am not sure if you need any assistance currently with this. But in case you do or you have a solution, please do share it here.
I would first start by comparing the shutdown time and On Demand scan running on the machine. I would do that by comparing On Demand scan schedule time and the shutdown time.
Also, I will look into the On-Access Scan log and check the same with the shutdown time stamp to see if I can find out any anomalies there.
Both On Access Scan log and On Demand Scan log are available at : C:\ProgramData\McAfee\Endpoint Security\Logs.
Can you please confirm if these shutdown happened when there were activities being recorded in these logs. This would make more sense!
Also, It is important to understand how these Shutdown events were triggered on the days when the error is received. I sincerely hope this helps to find a good path for further investigation.
We looked down the path you mentioned (checking the logs for events around the same timestamps) but could not find anything related to shutting down, and these were not related to the machine shutting down itself.
Do you have :
* more hints on further diagnostic paths
* secret debugging flags to disclose
* internal bug tracker entries related to this