Restart

[Montmorency]

The process svchost.exe has initiated the restart of computer on behalf of user NT AUTHORITY\SYSTEM for the following reason: Operating System: Hot fix (Planned)

How do I prevent this infuriating unannounced auto-restart from recurring?

[Lemur]

Try configuring Automatic Updates by using group policy.

http://technet.microsoft.com/en-us/library/cc720539(WS.10).aspx

See the paragraph "No Auto-restart for Scheduled Automatic Update Installation Options":

No Auto-restart for Scheduled Automatic Update Installation Options

This policy specifies that to complete a scheduled installation, Automatic Updates will wait for the computer to be restarted by any user who is logged on, instead of causing the computer to restart automatically.

If the status is set to Enabled, Automatic Updates will not restart a computer automatically during a scheduled installation if a user is logged on to the computer. Instead, Automatic Updates will notify the user to restart the computer in order to complete the installation.

Be aware that Automatic Updates will not be able to detect future updates until the restart occurs.

If the status is set to Disabled or Not Configured, Automatic Updates will notify the user that the computer will automatically restart in 5 minutes to complete the installation.

This policy applies only when Automatic Updates is configured to perform scheduled installations of updates. If the Configure Automatic Updates policy is disabled, this policy has no effect.

To inhibit auto-restart for scheduled Automatic Update installation options
In Group Policy Object Editor, expand Computer Configuration, expand Administrative Templates, expand Windows Components, and then click Windows Update.

In the details pane, click No auto-restart for scheduled Automatic Update installation options, and set the option.

Click OK.

[Montmorency]

No, see, that's been configured for months. This restart just started happening a week ago, and wasn't labeled as an automatic update (it was back when decided to change the settings). I should get a pop-up asking for a restart, now or later. Instead, it just restarts. And I'm no tech whiz, but I'm pretty sure svchost never had anything to do with it.

At any rate:
The Local Group Policy Editor will only be available in the Windows 7 Professional, Ultimate, and Enterprise editions.
The Local Group Policy Editor feature is not included in the Windows 7 Starter, Home Basic, and Home Premium editions.

Heh. Which explains why I don't have gpedit.msc on my machine. :sweatdrop:

[Lemur]

Heh. Which explains why I don't have gpedit.msc on my machine. :sweatdrop:
I usually advise people to go with Win7Pro at minimum, since the need to VPN is more common than you would expect. And it's gimped out of every distro below Pro.

Now there's another reason, I guess.

I assume you've tried a system restore point?

[Montmorency]

I assume you've tried a system restore point?

Woah there, why would that be merited? That's a pretty drastic step to take for what's only been an annoyance so far.

[Lemur]

Backing up current data and hitting a restore point is a pretty decent way to get around random Windows weirdness. That's why I suggested it.

[Montmorency]

Ah, well, that wouldn't be an option except in the direst of circumstances: my HD is full-up.

[Xiahou]

The process svchost.exe has initiated the restart of computer on behalf of user NT AUTHORITY\SYSTEM for the following reason: Operating System: Hot fix (Planned)
Where/how are you getting that message?

[Montmorency]

Event Viewer after the restart.

[Beskar]

Spyware?

[Montmorency]

Nah, I don't think so. It's just restarting.

I've determined that it's happening every other day, at 4:50 A.M. or thereabouts. Must be something messed up in the update mechanism recently. But apparently not Windows Auto Update. :shrug:

[Husar]

It actually reminded me of a virus that was in the news a while ago, it sent itself around to random IPs but had to restart the computer due to some network limitations after a while. That was the only thing the user would notice IIRC.

If it always happens around the same time it may just as well be something else though.