I took control of a new VM running Windows Server 2019 (Datacenter) recently. Since that time, on each login to the server (via RDP) the Shutdown Event Tracker shows asking for information about an unexpected shutdown.
Checking the Event Viewer there is no evidence of a restart, unexpected or otherwise, since the previous time I'd seen this message previously and filled it out.
How do I stop this from showing each logon or clear whatever is stuck in the system that is triggering it?
I don't want to NOT see this dialog when it is warranted, I just know it's not warranted in this case and want to know how to stop it from showing up on EVERY logon.
The server is up to date on patches, serving files without much of any additional software except for the Splunk UniversalForwarder mandated by HQ.
In research of this issue I've found it has been reported occurring on Server 2016 and 2019. Removing two registry keys appears to resolve the issue.
To resolve I opened the Registry using an account with admin privileges on the server, and navigated to and deleted the two following registry keys (after backing up, of course):
After removing these two registry keys the Shutdown Event Tracker did not show up on subsequent logins.
Just change the value of \HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Reliability .\DirtyShutdown to 0