The Warning message shown below appears in the System Log of the Event Viewer on Windows Server 2003 and Windows XP:
Windows Server 2003
Event Type: Warning
Event Source: USER32
Event ID: 1073
Description: The attempt by user DOMAIN\USERID to restart/shutdown computer COMPUTERNAME failed
Windows XP
Event Type: Warning
Event Source: USER32
Event ID: 1073
Description: The attempt to unknown COMPUTERNAME failed
This warning message is expected behavior.
It occurs when the logoff, shutdown or restart process is interrupted by the Desktop Agent. Windows detects the interruption and reports it to the System Log of the Event Viewer. ScriptLogic/Desktop Authority elements set for logoff are executed. Once execution of these elements is complete, the logoff, shutdown or restart process starts again and continues normally.
