Event ID 41 — Clean-up without stop (Kernel-Power)

Windows restarted without having made a complete and clean shutdown.

Source of event

Microsoft-Windows-Kernel-Power — System category.

Possible causes

• Electrical cutting
• Material
• BSOD
• Blocking forced a restart

Verifications to be carried out

1. Search for aBuzz check 1001
2. Check 6008
3. Controlling power, temperature and equipment

Useful orders….

Get-WinEvent -FilterHashtable @{LogName='System'; Id=41} -MaxEvents 10

To be retained….

An Event ID must always be interpreted with its source, its full message, its timing and the context of the system. The same number may exist in several providers of events.