Event viewer: kernel-power. The system session has transitioned from 0 to 1.

Does anyone know what these numbers mean? I get a lot of event viewer messages saying "system session has transitioned from x to y" with many different numbers. Seems to be something to do with when I lock the machine and the monitors go off, and when I wake the screens back up again, but there's a lot of these messages. I never sleep or hibernate the machine, it runs science programs 24/7, so the CPU is always in full power mode. Is there a list of these numbers somewhere?

Data about Event viewer entries is patchy.
You'd have to search for the particular ones you are interested in.
But do remember that Events are logged for Windows' benefit not ours. The existence of events does not mean that there are faults that need fixing.

What are the parameters necessary to tell other people what you are looking at?
You need to define
Log name
Source
EventID
and these are all shown in the General tab in Event viewer.
For example,




All the best,
Denis

Does this help with "Event ID 566 Kernel-Power: The system has transitioned from ..."?

There is no problem, everything is functioning as intended. It's not showing as an error, event viewer shows "information" in the left column.



I often use the kernel-power entries if I want to find when I got up or went to bed! I got interested in why they always have different numbers, and why sometimes they occured when I wasn't there. When I go to bed, I lock the screen, which turns off the monitors after 1 minute. When I get up, I wake it up by moving the mouse then entering the password.

For example:

When I awoke the computer from screen-off (not sleep) when I got up this morning:
Log name: System
Source: Kernel-Power
EventID: 566
"The system session has transitioned from 4 to 6
Reason 285"

Previously, in the middle of the night:
"transitioned from 1 to 3" and 25 seconds later "3 to 4", all other codes the same.

Previously, when I locked the screen yesterday evening:
"0 to 1"

Strange it was in state 0 yesterday, but it's now in state 6. I would of expected the same number each day.

I wouldn't begin confusing with "user state" with "system state". System state can change rapidly in the background. Unfortunately, Microsoft does not always publicly document these Event IDs very well, as is the case with Event ID 566, so we can only suppose that the message refers to system state.

iko22 said:

I wouldn't begin confusing with "user state" with "system state". System state can change rapidly in the background. Unfortunately, Microsoft does not always publicly document these Event IDs very well, as is the case with Event ID 566, so we can only suppose that the message refers to system state.

Click to expand...

I don't know what you mean by user state and system state. I assumed it was talking about the system, where the number in "The system session has transitioned from" would refer to perhaps hibernate, sleep, monitor off, awake. Why did the power state change in the middle of the night, twice? Why is it in a different state now than yesterday? I rarely see this message apart from when I lock and unlock the screen.

Since these events are related to power then the values may be referring to the SYSTEM_POWER_STATE enumeration.

Lamberto,

My
entries coincide with transitions into & out of S0 Modern standby.

I have amalgamated the EventID 566 you are interested in into my EventViewer, Custom view for monitoring S0-Sleep-Hibernate transitions

You can import the view to find out if seeing the 566 records in this context helps you interpret them. I never lock my computer so I do not know what effect that has.
Experimental Power - S0-Sleep-Hibernate transitions.zip

I wrote the procedure for importing an Event viewer, Custom view in
Event viewer, Custom view, Power - Sleep-Hibernate-S0 transitions- TenForums
It is the same procedure in Windows 11 [and the same Custom view definition works in Win10 & Win11 for both S3 Sleep computers & S0 Modern standby computers].
Do make sure you import the new Experimental Power - S0-Sleep-Hibernate transitions.zip file I've attached here for you. The one in that TenForums post does not detect EventID 566 [I had never heard of it before your thread].
You can call it whatever you want. I always put Experimental, Exp or XXX at the start of new Custom view definitions until I decide whether or not I'm going to keep them.


Best of luck,
Denis

The numbers do not seem to correspond to any meaning by themselves. Using your custom view, I find the numbers increase each time, until the machine is rebooted, then it starts at 0 again. They usually increase when the machine is locked or unlocked. Not sure about the middle of the night ones, I can't find the computer having done anything last night except continuing to run Boinc and Folding at Home. No reboot or crash or windows updates.

The only other enumeration which it might be is:


It's used for the state of the user session. If it isn't that, then it is probably undocumented by Microsoft and has others have mentioned, it's an information event so I wouldn't worry about it.

Checking through my events, it went from 0 at reboot to 42, 1 at a time with each lock and unlock. Seems like a counter rather than a state. Not sure of what use a counter like that is.

Years ago, Windows could start having problems if it was slept then woken many times between restarts.
Perhaps this event is an attempt to count such transitions so Windows can warn you of impending problems??????
Or perhaps it has something to do with Windows learning your usage, your power behaviour?????


Denis

Perhaps, but I'm not actually sleeping it, only the monitor gets powered off. The CPU and GPU are running flat out 24/7, not even low power states used. Surely putting the monitor to sleep a number of times doesn't cause problems? In fact I'm not sure why Windows should have a problem even sleeping x times between reboots. But then it is MS....

The learning thing might make sense - for example deciding when my active hours are, so it can install an update when I'm not looking and infuriate me when everything's been lost in the morning. I read in a forum somewhere somebody had deliberately set their active hours upside down, so it would want to reboot when they were present, allowing them to gracefully close apps.

Lamberto Vitali said:

I don't know what you mean by user state and system state.

Click to expand...

I may have confused the issue by using the word "state". I could have referred to them as "modes", as these words can be interchangeable in electronics and computer science. Windows is designed to operate in two modes: user mode and system mode (kernel mode).
Basically, the user mode deals with user requests and running an application. The system mode (or kernel mode) deals with the boot sequence, privileged instructions and system calls.
"The transition from user mode to kernel mode occurs when the application requests the help of operating system or an interrupt or a system call occurs.
The mode bit is set to 1 in the user mode. It is changed from 1 to 0 when switching from user mode to kernel mode."
Source: User Mode vs Kernel Mode

With you locking the computer every night might alter these operational modes of the computer, and at the same time, change the power states of some attached devices, thus triggering Event 566. You might like to investigate what you have attached to the computer, other than keyboard, mouse and monitor?

But I would not worry too much about Information Events in Event Viewer. They just show the computer is doing it's job, and it is completing it's job successfully.

Lamberto Vitali said:

somebody had deliberately set their active hours upside down, so it would want to reboot when they were present, allowing them to gracefully close apps

Click to expand...

And I manipulate WU by setting my networks as 'metered' [as if I had to pay for each byte] so WU does not try to do any updates [apart from one particular small one about once a year].
- I run a utility to identify required updates.
- I search for them in ElevenForum News - there's a thread on virtually every update that includes a direct download link so I can install them manually.


Denis

I can't be bothered researching them, or even remembering to update manually every so often. I'd like them to download and install, then wait for me to say ok before the restart. Only the restart bothers me. There seems to be no way to stop it. I've done a few methods I've found online, then MS eventually finds a way to thwart them, it's like I'm breaking a law or something and they're trying to stop me doing so, it's ridiculous.

Understood.

Doesn't this achieve what you want?
Schedule Restart for Windows Update - ElevenForumTutorials

Denis

That would require me to know what I'll be doing at a certain time. My computer is in use 24 hours a day. I want to click the restart button when I'm not in the middle of anything. I'd like the little icon to sit there forever and I click it when I'm ready. The way it used to be in older Windows versions.

The only other method I know of is
Enable or Disable Auto-restart Notifications for Windows Update - ElevenForumTutorials
which would give you time to complete your current task before restarting.

I don't know if you Pro users have any additional policies that are relevant to this subject.


All the best,
Denis

It's not clear what the settings in those instructions do. Turning off the notification of restart does what? Never restarts? Restarts without warning?

I simply want it to say "I want to restart", and me be able to say "yeah later whatever", or just leave the icon there until I'm ready. At the moment I'm clicking "hide for now" in the hopes it won't restart without asking me again. The way AVG does it is better. It says a restart is required, and the options are simply "now", "remind me in an hour", "remind me in a day", "remind me next century".

I did use policies as found on another website, but that seems to have stopped working. Machines I used it on are now restarting in the middle of the night.