{"id":290,"date":"2017-07-17T22:19:31","date_gmt":"2017-07-17T22:19:31","guid":{"rendered":"http:\/\/eventlogxp.com\/blog\/?p=290"},"modified":"2017-11-18T15:17:12","modified_gmt":"2017-11-18T15:17:12","slug":"troubleshooting-unplanned-windows-automatic-wake-up","status":"publish","type":"post","link":"https:\/\/eventlogxp.com\/blog\/troubleshooting-unplanned-windows-automatic-wake-up\/","title":{"rendered":"Troubleshooting unplanned Windows automatic wake-ups"},"content":{"rendered":"<p>Whenever I finish working with my computer, I almost never power it off. Instead I send the computer into sleep or hibernate state. This saves lots of time at\u00a0startup \u2013 I can easily continue working without reloading all the projects. However I discovered that recently my Windows 10 laptop started to wake up unexpectedly. \u00a0Such unplanned wake-ups can damage computers, e.g. if a laptop left on a sofa, its air vents can be blocked, which leads to overheating.<\/p>\n<p>First, I thought that it&#8217;s a Windows automatic maintenance issue and I should look into\u00a0it. Let&#8217;s check it out.<\/p>\n<p>Open Windows Control Panel, Security and Maintenance, Maintenance:<\/p>\n<p><a href=\"http:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2017\/07\/Automatic-Maintenance.png\" data-rel=\"lightbox-gallery-AwCqWryR\" data-rl_title=\"\" data-rl_caption=\"\" title=\"\"><img loading=\"lazy\" class=\"alignnone size-medium wp-image-291\" src=\"http:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2017\/07\/Automatic-Maintenance-300x137.png\" alt=\"Automatic-Maintenance\" width=\"300\" height=\"137\" srcset=\"https:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2017\/07\/Automatic-Maintenance-300x137.png 300w, https:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2017\/07\/Automatic-Maintenance-768x350.png 768w, https:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2017\/07\/Automatic-Maintenance-660x301.png 660w, https:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2017\/07\/Automatic-Maintenance.png 820w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<p>Well, it looks like Windows started scheduled maintenance at night and that was the reason for the issue. Click <em>Change maintenance settings<\/em>.<\/p>\n<p><a href=\"http:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2017\/07\/Schedule-Maintenance-Settings.png\" data-rel=\"lightbox-gallery-AwCqWryR\" data-rl_title=\"\" data-rl_caption=\"\" title=\"\"><img loading=\"lazy\" class=\"alignnone size-medium wp-image-292\" src=\"http:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2017\/07\/Schedule-Maintenance-Settings-300x123.png\" alt=\"Schedule-Maintenance-Settings\" width=\"300\" height=\"123\" srcset=\"https:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2017\/07\/Schedule-Maintenance-Settings-300x123.png 300w, https:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2017\/07\/Schedule-Maintenance-Settings-660x271.png 660w, https:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2017\/07\/Schedule-Maintenance-Settings.png 749w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<p>That&#8217;s quite strange. The scheduled time is different from the last run time and wake-up option is not ticked (if this option is ticked on your computer, untick it or change the maintenance time).<\/p>\n<p>So, we need to investigate the problem deeper and check event logs. Start Event Log Explorer and open System log on a local computer. We can set filter by Microsoft-Windows-Kernel-Power, event id = 107 to get resume from sleep events, but this is not a very good way. The event time is almost equal to the sleep time because Windows hasn&#8217;t synchronized its clock with the hardware clock yet. We can get the hardware (real) time from XML details of this event (ProgrammedWakeTimeAc or ProgrammedWakeTimeDc), but it&#8217;s written in UTC format, so you will have to convert it into your local time.<\/p>\n<p>Fortunately, there is a better way to get sleep\/wake-up details. Set filter by <em>Source = Microsoft-Windows-Power-Troubleshooter.<\/em><\/p>\n<p><a href=\"http:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2017\/07\/Microsoft-Windows-Power-Troubleshooter-FIlter.png\" data-rel=\"lightbox-gallery-AwCqWryR\" data-rl_title=\"\" data-rl_caption=\"\" title=\"\"><img loading=\"lazy\" class=\"alignnone size-medium wp-image-293\" src=\"http:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2017\/07\/Microsoft-Windows-Power-Troubleshooter-FIlter-300x127.png\" alt=\"Microsoft-Windows-Power-Troubleshooter-FIlter\" width=\"300\" height=\"127\" srcset=\"https:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2017\/07\/Microsoft-Windows-Power-Troubleshooter-FIlter-300x127.png 300w, https:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2017\/07\/Microsoft-Windows-Power-Troubleshooter-FIlter-768x325.png 768w, https:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2017\/07\/Microsoft-Windows-Power-Troubleshooter-FIlter-660x279.png 660w, https:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2017\/07\/Microsoft-Windows-Power-Troubleshooter-FIlter.png 854w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<p>Now we can see sleep\/resume events in the list. And here is our event along with the reason for waking up. It is NT TASK\\Microsoft\\Windows\\UpdateOrchestrator\\Reboot scheduled task.<\/p>\n<p><a href=\"http:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2017\/07\/Power-events-filtered1.png\" data-rel=\"lightbox-gallery-AwCqWryR\" data-rl_title=\"\" data-rl_caption=\"\" title=\"\"><img loading=\"lazy\" class=\"alignnone size-medium wp-image-295\" src=\"http:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2017\/07\/Power-events-filtered1-300x124.png\" alt=\"Power-events-filtered\" width=\"300\" height=\"124\" srcset=\"https:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2017\/07\/Power-events-filtered1-300x124.png 300w, https:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2017\/07\/Power-events-filtered1-768x318.png 768w, https:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2017\/07\/Power-events-filtered1-1024x424.png 1024w, https:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2017\/07\/Power-events-filtered1-660x274.png 660w, https:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2017\/07\/Power-events-filtered1.png 1344w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<p>Let&#8217;s find this task.<\/p>\n<p>Run Windows Task Scheduler.<\/p>\n<p>In the left pane browse for <em>Task Scheduler Library\\Microsoft\\Windows\\UpdateOrchestrator<\/em><\/p>\n<p>Double click on Reboot in the right pane.<\/p>\n<p>Switch to Condition tab and disable <em>Wake the computer to run the task<\/em>.<\/p>\n<p><a href=\"http:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2017\/07\/UpdateOrchestrator-Reboot-NoWakeup.png\" data-rel=\"lightbox-gallery-AwCqWryR\" data-rl_title=\"\" data-rl_caption=\"\" title=\"\"><img loading=\"lazy\" class=\"alignnone size-medium wp-image-294\" src=\"http:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2017\/07\/UpdateOrchestrator-Reboot-NoWakeup-300x248.png\" alt=\"UpdateOrchestrator-Reboot-NoWakeup\" width=\"300\" height=\"248\" srcset=\"https:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2017\/07\/UpdateOrchestrator-Reboot-NoWakeup-300x248.png 300w, https:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2017\/07\/UpdateOrchestrator-Reboot-NoWakeup-660x546.png 660w, https:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2017\/07\/UpdateOrchestrator-Reboot-NoWakeup.png 715w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<p>That&#8217;s it. \u00a0Now the computer won&#8217;t wake up unexpectedly.<\/p>\n<h2>UPDATE<\/h2>\n<p>After several days, the problem came back. It appears that Windows modifies Reboot task on its own and enables Wake option. I found some discussions about this issue on Microsoft&#8217;s forums, but didn&#8217;t get a reasonable solution.<\/p>\n<p>So, I&#8217;ve created my own tool: <strong>UpdateOrchestrator\\Reboot fix<\/strong>.<\/p>\n<p>This\u00a0tiny program disables Wake option for Update Orchestrator\\Reboot task. When you run it, it checks if this option enabled. If so, it switches it off. You should run it elevated or it will fail to update the task.<\/p>\n<p>To run it on regular basis, just create a new task in Task Scheduler. I scheduled to run it every hour and it&#8217;s more than enough.<\/p>\n<p><a href=\"http:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2017\/11\/FixUpdateOrchestrator.png\" data-rel=\"lightbox-gallery-AwCqWryR\" data-rl_title=\"\" data-rl_caption=\"\" title=\"\"><img loading=\"lazy\" class=\"alignnone size-medium wp-image-325\" src=\"http:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2017\/11\/FixUpdateOrchestrator-300x183.png\" alt=\"\" width=\"300\" height=\"183\" srcset=\"https:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2017\/11\/FixUpdateOrchestrator-300x183.png 300w, https:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2017\/11\/FixUpdateOrchestrator-660x402.png 660w, https:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2017\/11\/FixUpdateOrchestrator.png 684w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<p>Don&#8217;t forget that the program must be run elevated. I scheduled to run it from SYSTEM account:<\/p>\n<p><a href=\"http:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2017\/07\/FixUpdateOrch-SYSTEM.png\" data-rel=\"lightbox-gallery-AwCqWryR\" data-rl_title=\"\" data-rl_caption=\"\" title=\"\"><img loading=\"lazy\" class=\"alignnone size-medium wp-image-305\" src=\"http:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2017\/07\/FixUpdateOrch-SYSTEM-300x176.png\" alt=\"FixUpdateOrch-SYSTEM\" width=\"300\" height=\"176\" srcset=\"https:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2017\/07\/FixUpdateOrch-SYSTEM-300x176.png 300w, https:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2017\/07\/FixUpdateOrch-SYSTEM-660x386.png 660w, https:\/\/eventlogxp.com\/blog\/wp-content\/uploads\/2017\/07\/FixUpdateOrch-SYSTEM.png 692w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<p>The program is available at <a href=\"http:\/\/eventlogxp.com\/download\/utils\/UpdateOrchFix.exe\">http:\/\/eventlogxp.com\/download\/utils\/UpdateOrchFix.exe<\/a> and it&#8217;s free for any usage.<\/p>\n<a class=\"synved-social-button synved-social-button-share synved-social-size-24 synved-social-resolution-single synved-social-provider-facebook nolightbox\" data-provider=\"facebook\" target=\"_blank\" rel=\"nofollow\" title=\"Share on Facebook\" href=\"https:\/\/www.facebook.com\/sharer.php?u=https%3A%2F%2Feventlogxp.com%2Fblog%2Fwp-json%2Fwp%2Fv2%2Fposts%2F290&#038;t=Troubleshooting%20unplanned%20Windows%20automatic%20wake-ups&#038;s=100&#038;p&#091;url&#093;=https%3A%2F%2Feventlogxp.com%2Fblog%2Fwp-json%2Fwp%2Fv2%2Fposts%2F290&#038;p&#091;images&#093;&#091;0&#093;=https%3A%2F%2Feventlogxp.com%2Fblog%2Fwp-content%2Fuploads%2F2017%2F07%2FWindows-wakeup-troubleshooting.png&#038;p&#091;title&#093;=Troubleshooting%20unplanned%20Windows%20automatic%20wake-ups\" style=\"font-size: 0px;width:24px;height:24px;margin:0;margin-bottom:5px;margin-right:5px\"><img alt=\"Facebook\" title=\"Share on Facebook\" class=\"synved-share-image synved-social-image synved-social-image-share\" width=\"24\" height=\"24\" style=\"display: inline;width:24px;height:24px;margin: 0;padding: 0;border: none\" src=\"https:\/\/eventlogxp.com\/blog\/wp-content\/plugins\/social-media-feather\/synved-social\/image\/social\/regular\/48x48\/facebook.png\" \/><\/a><a class=\"synved-social-button synved-social-button-share synved-social-size-24 synved-social-resolution-single synved-social-provider-twitter nolightbox\" data-provider=\"twitter\" target=\"_blank\" rel=\"nofollow\" title=\"Share on Twitter\" href=\"https:\/\/twitter.com\/intent\/tweet?url=https%3A%2F%2Feventlogxp.com%2Fblog%2Fwp-json%2Fwp%2Fv2%2Fposts%2F290&#038;text=Check%20this%20Event%20Log%20Explorer%20blog%20post\" style=\"font-size: 0px;width:24px;height:24px;margin:0;margin-bottom:5px;margin-right:5px\"><img alt=\"twitter\" title=\"Share on Twitter\" class=\"synved-share-image synved-social-image synved-social-image-share\" width=\"24\" height=\"24\" style=\"display: inline;width:24px;height:24px;margin: 0;padding: 0;border: none\" src=\"https:\/\/eventlogxp.com\/blog\/wp-content\/plugins\/social-media-feather\/synved-social\/image\/social\/regular\/48x48\/twitter.png\" \/><\/a><a class=\"synved-social-button synved-social-button-share synved-social-size-24 synved-social-resolution-single synved-social-provider-reddit nolightbox\" data-provider=\"reddit\" target=\"_blank\" rel=\"nofollow\" title=\"Share on Reddit\" href=\"https:\/\/www.reddit.com\/submit?url=https%3A%2F%2Feventlogxp.com%2Fblog%2Fwp-json%2Fwp%2Fv2%2Fposts%2F290&#038;title=Troubleshooting%20unplanned%20Windows%20automatic%20wake-ups\" style=\"font-size: 0px;width:24px;height:24px;margin:0;margin-bottom:5px;margin-right:5px\"><img alt=\"reddit\" title=\"Share on Reddit\" class=\"synved-share-image synved-social-image synved-social-image-share\" width=\"24\" height=\"24\" style=\"display: inline;width:24px;height:24px;margin: 0;padding: 0;border: none\" src=\"https:\/\/eventlogxp.com\/blog\/wp-content\/plugins\/social-media-feather\/synved-social\/image\/social\/regular\/48x48\/reddit.png\" \/><\/a><a class=\"synved-social-button synved-social-button-share synved-social-size-24 synved-social-resolution-single synved-social-provider-pinterest nolightbox\" data-provider=\"pinterest\" target=\"_blank\" rel=\"nofollow\" title=\"Pin it with Pinterest\" href=\"https:\/\/pinterest.com\/pin\/create\/button\/?url=https%3A%2F%2Feventlogxp.com%2Fblog%2Fwp-json%2Fwp%2Fv2%2Fposts%2F290&#038;media=https%3A%2F%2Feventlogxp.com%2Fblog%2Fwp-content%2Fuploads%2F2017%2F07%2FWindows-wakeup-troubleshooting.png&#038;description=Troubleshooting%20unplanned%20Windows%20automatic%20wake-ups\" style=\"font-size: 0px;width:24px;height:24px;margin:0;margin-bottom:5px;margin-right:5px\"><img alt=\"pinterest\" title=\"Pin it with Pinterest\" class=\"synved-share-image synved-social-image synved-social-image-share\" width=\"24\" height=\"24\" style=\"display: inline;width:24px;height:24px;margin: 0;padding: 0;border: none\" src=\"https:\/\/eventlogxp.com\/blog\/wp-content\/plugins\/social-media-feather\/synved-social\/image\/social\/regular\/48x48\/pinterest.png\" \/><\/a><a class=\"synved-social-button synved-social-button-share synved-social-size-24 synved-social-resolution-single synved-social-provider-linkedin nolightbox\" data-provider=\"linkedin\" target=\"_blank\" rel=\"nofollow\" title=\"Share on Linkedin\" href=\"https:\/\/www.linkedin.com\/shareArticle?mini=true&#038;url=https%3A%2F%2Feventlogxp.com%2Fblog%2Fwp-json%2Fwp%2Fv2%2Fposts%2F290&#038;title=Troubleshooting%20unplanned%20Windows%20automatic%20wake-ups\" style=\"font-size: 0px;width:24px;height:24px;margin:0;margin-bottom:5px;margin-right:5px\"><img alt=\"linkedin\" title=\"Share on Linkedin\" class=\"synved-share-image synved-social-image synved-social-image-share\" width=\"24\" height=\"24\" style=\"display: inline;width:24px;height:24px;margin: 0;padding: 0;border: none\" src=\"https:\/\/eventlogxp.com\/blog\/wp-content\/plugins\/social-media-feather\/synved-social\/image\/social\/regular\/48x48\/linkedin.png\" \/><\/a><a class=\"synved-social-button synved-social-button-share synved-social-size-24 synved-social-resolution-single synved-social-provider-mail nolightbox\" data-provider=\"mail\" rel=\"nofollow\" title=\"Share by email\" href=\"mailto:?subject=Troubleshooting%20unplanned%20Windows%20automatic%20wake-ups&#038;body=Check%20this%20Event%20Log%20Explorer%20blog%20post:%20https%3A%2F%2Feventlogxp.com%2Fblog%2Fwp-json%2Fwp%2Fv2%2Fposts%2F290\" style=\"font-size: 0px;width:24px;height:24px;margin:0;margin-bottom:5px\"><img alt=\"mail\" title=\"Share by email\" class=\"synved-share-image synved-social-image synved-social-image-share\" width=\"24\" height=\"24\" style=\"display: inline;width:24px;height:24px;margin: 0;padding: 0;border: none\" src=\"https:\/\/eventlogxp.com\/blog\/wp-content\/plugins\/social-media-feather\/synved-social\/image\/social\/regular\/48x48\/mail.png\" \/><\/a>","protected":false},"excerpt":{"rendered":"<p>Whenever I finish working with my computer, I almost never power it off. Instead I send the computer into sleep or hibernate state. This saves lots of time at\u00a0startup \u2013 I can easily continue working without reloading all the projects. However I discovered that recently my Windows 10 laptop started to wake up unexpectedly. \u00a0Such unplanned wake-ups can damage computers, e.g. if a laptop left\u2026 <span class=\"read-more\"><a href=\"https:\/\/eventlogxp.com\/blog\/troubleshooting-unplanned-windows-automatic-wake-up\/\">Read More &raquo;<\/a><\/span><\/p>\n","protected":false},"author":2,"featured_media":296,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[39],"tags":[53,50,9],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/eventlogxp.com\/blog\/wp-json\/wp\/v2\/posts\/290"}],"collection":[{"href":"https:\/\/eventlogxp.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/eventlogxp.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/eventlogxp.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/eventlogxp.com\/blog\/wp-json\/wp\/v2\/comments?post=290"}],"version-history":[{"count":13,"href":"https:\/\/eventlogxp.com\/blog\/wp-json\/wp\/v2\/posts\/290\/revisions"}],"predecessor-version":[{"id":333,"href":"https:\/\/eventlogxp.com\/blog\/wp-json\/wp\/v2\/posts\/290\/revisions\/333"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/eventlogxp.com\/blog\/wp-json\/wp\/v2\/media\/296"}],"wp:attachment":[{"href":"https:\/\/eventlogxp.com\/blog\/wp-json\/wp\/v2\/media?parent=290"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/eventlogxp.com\/blog\/wp-json\/wp\/v2\/categories?post=290"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/eventlogxp.com\/blog\/wp-json\/wp\/v2\/tags?post=290"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}