win10 laptops randomly reboot no bug check

WINDBG
1

Wondering if there are any suggestions for next steps to systematically try
and identify root cause of machines randomly reboot with critical system
event “The system has rebooted without cleanly shutting down first. This
error could be caused if the system stopped responding, crashed, or lost
power unexpectedly.”

This is happening on Windows 10 v1607 and v1803 devices on different laptop
hardware models (i.e. Lenovo & HP) The Windows 10 image has been prepared
by the IT department, it is not the vendor image.

Across 145 laptops in particular site identified this is occurring to over
90% of devices. The worst affected devices may have these occur several
times a week, however we haven’t identified a consistent method to
reproduce.

What we have tried

  • Disable Automatic Restart After Crash, no bug check
  • Enable Driver Verifier default settings on network+gfx & other drivers,
    still no bug check
  • Run hardware diagnostic tests provided by vendor (all pass)
  • Enable process creation/termination auditing to look for any pattern
    prior to crash

Currently plan is to use a plain Windows 10 image and gradually add back
the other 3rd party software in use/configurations.

Any other suggestions?

Thanks

Malcolm.
https://chentiangemalc.wordpress.com

2

I’ve been having the same symptom on a home laptop (plain Win10 install, Asus hardware) - so far it seems to be triggered by resuming from sleep/hibernate mode. It’s only a minor irritation so I haven’t investigated too intensively - is this happening while the machines are in active use, or only suspend/resume time?

3

In this case it is not triggered on resume from sleep or hibernate, but
while machines are in use.

Thanks
Malcolm.

On Wednesday, August 22, 2018, xxxxx@sutherland.pw wrote:

> I’ve been having the same symptom on a home laptop (plain Win10 install,
> Asus hardware) - so far it seems to be triggered by resuming from
> sleep/hibernate mode. It’s only a minor irritation so I haven’t
> investigated too intensively - is this happening while the machines are in
> active use, or only suspend/resume time?
>
> —
> WINDBG is sponsored by OSR
>
> OSR is hiring!! Info at http://www.osr.com/careers
>
>
> MONTHLY seminars on crash dump analysis, WDF, Windows internals and
> software drivers!
> Details at http:
>
> To unsubscribe, visit the List Server section of OSR Online at <
> http://www.osronline.com/page.cfm?name=ListServer&gt;
></http:>