How to slow down (delay) shutting down Windows?

Thank you for the logs @Sammy888


Here is what the logs are showing. Some things to consider and try to fix if possible.


System errors:
=============
Error: (02/14/2022 09:34:17 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The LenovoVantageService service terminated unexpectedly. It has done this 1 time(s).

Error: (02/14/2022 03:33:05 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 3:25:14 PM on ‎2022-‎02-‎14 was unexpected.

Error: (02/14/2022 03:30:03 PM) (Source: Netwtw10) (EventID: 5005) (User: )
Description: Intel(R) Wi-Fi 6 AX201 160MHz : Has encountered an internal error and has failed.
5005 - Driver internal error

Error: (02/14/2022 03:30:02 PM) (Source: Netwtw10) (EventID: 5002) (User: )
Description: Intel(R) Wi-Fi 6 AX201 160MHz : Has determined that the network adapter is not functioning properly.
5002 - uCode SW error (SysAssert, NMI)

Error: (02/13/2022 06:15:11 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: The LenovoVantageService service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly.




Not sure exactly what issue you're speaking of with Windows Defender but if WD is not working well it can cause many different types of issues.
I would highly recommend you correct any WD issues and get Windows Defender working as it should. I would not recommend using 3rd party apps to help you stop WD - If you really need to temporarily stop it you can do so from within the Security Center.


Date: 2022-02-13 18:44:32
Description:
Microsoft Defender Antivirus Real-Time Protection feature has encountered an error and failed.
Feature: Behavior Monitoring
Error Code: 0x80004005
Error description: Unspecified error
Reason: Antimalware security intelligence has stopped functioning for an unknown reason. In some instances, restarting the service may resolve the problem.


Date: 2022-02-13 18:07:19
Description:
Microsoft Defender Antivirus has encountered an error trying to update security intelligence.
New security intelligence Version:
Previous security intelligence Version: 1.303.25.0
Update Source: Microsoft Update Server
Security intelligence Type: AntiVirus
Update Type: Full
Current Engine Version:
Previous Engine Version: 1.1.16400.2
Error code: 0x80070422
Error description: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.




You have some policies set. Not sure if you set some registry values for that or not
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION



Not really a fan of CCleaner myself especially after they sold the software, but the choice is yours. Please do not use the Registry Cleaning portion of the tool if you do use it.


A few recommended articles to read on registry cleaners:


Registry cleaners are not supported by Microsoft


"Microsoft cannot guarantee that problems resulting from the use of a registry cleaning utility can be solved. Issues caused by these utilities may not be repairable and lost data may not be recoverable"

Microsoft support policy for the use of registry cleaning utilities

An often posted and quoted article (Ed no longer hosts the site but did mention again on Twitter),
Ed Bott's Why I don't use registry cleaners

miekiemoes' Blog Registry Cleaners and System Tweaking Tools

Registry cleaner - From Wikipedia


In most cases regardless of which Registry Cleaning tool you use it's not going to outright break Windows from booting or running. Normally the damage done is rarely seen or even attributed to the cleaning. How it can sometimes manifest itself is with an application simply not behaving as it used to, a program feature that no longer launches. In some cases on a computer with detailed auditing enabled it can show errors that were not there prior to the cleaning, but again these are typically things that would be nearly impossible to know after the fact what caused it.


The bottom line is WHY are you cleaning the Registry? The system can typically read through the entire Registry in under a minute, but that is not how software reads, writes to the Registry. It makes a specific call to a location where it expects its configuration to be or where it needs to possibly interface with other COM objects to complete an operation and can typically make that read in milliseconds. Reading all the keys for my HKCU hive took 249 ms with a total of 21047 keys. So how is removing a dozen or a few dozen going to really help speed up my computer?


If you can show proof positive 100% that some value in the Registry is actually causing an issue then change or remove THAT entry. Not hundreds or dozens of entries because someone that has been programming for a few years now somehow feels they or their team know the Billions of possible values and every single one that is good or bad and can automate fixing it. Sorry but I call BS, no one knows every single entry and what it means let alone if it's good or bad.

@Sammy888
Hopefully, that will do it. But keep an eye on it, just in case.

AdvancedSetup said:

Thank you for the logs @Sammy888


Here is what the logs are showing. Some things to consider and try to fix if possible.


System errors:
=============
Error: (02/14/2022 09:34:17 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The LenovoVantageService service terminated unexpectedly. It has done this 1 time(s).

Error: (02/14/2022 03:33:05 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 3:25:14 PM on ‎2022-‎02-‎14 was unexpected.

Error: (02/14/2022 03:30:03 PM) (Source: Netwtw10) (EventID: 5005) (User: )
Description: Intel(R) Wi-Fi 6 AX201 160MHz : Has encountered an internal error and has failed.
5005 - Driver internal error

Error: (02/14/2022 03:30:02 PM) (Source: Netwtw10) (EventID: 5002) (User: )
Description: Intel(R) Wi-Fi 6 AX201 160MHz : Has determined that the network adapter is not functioning properly.
5002 - uCode SW error (SysAssert, NMI)

Error: (02/13/2022 06:15:11 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: The LenovoVantageService service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly.


You have some policies set. Not sure if you set some registry values for that or not
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION


If you can show proof positive 100% that some value in the Registry is actually causing an issue then change or remove THAT entry. Not hundreds or dozens of entries because someone that has been programming for a few years now somehow feels they or their team know the Billions of possible values and every single one that is good or bad and can automate fixing it. Sorry but I call BS, no one knows every single entry and what it means let alone if it's good or bad.

Click to expand...

There are no issues (at the moment with WD). Let's put that aside.

I have not modified any entries in the registry, nor have I run CCleaner registry cleaner. I use it as a more convenient uninstaller and cookie cleaner.

Can we focus on the above issues, please. What do you suggest resolving them because these are 'out of the box' clean installation errors that FRST picked up?

Ghot said:

@Sammy888
Hopefully, that will do it. But keep an eye on it, just in case.

Click to expand...

Hopefully.

I will change the settings to 40K and 80K respectively to see if my laptop slows down during shutdown.

Sammy888 said:

Hopefully.

I will change the settings to 40K and 80K respectively to see if my laptop slows down during shutdown.

Click to expand...

Only change them to 40k or 80k if necessary.
The lower the number, the faster the shutdown.

Ghot said:

Only change them to 40k or 80k if necessary.
The lower the number, the faster the shutdown.

Click to expand...

@Ghot
The registry tweaks are working as they should.

My system just hung. The error message said the following:

Program Manager: this app is preventing your system from shutting down.

The only option is to select "restart anyway".

I don't have any application called Program Manager.

Sammy888 said:

@Ghot
The registry tweaks are working as they should.

My system just hung. The error message said the following:

Program Manager: this app is preventing your system from shutting down.

The only option is to select "restart anyway".

I don't have any application called Program Manager.

Click to expand...

Yeah, that's strange.
Do you have any 3rd party File Manager or 3rd party Explorer, running?

Ghot said:

Yeah, that's strange.
Do you have any 3rd party File Manager or 3rd party Explorer, running?

Click to expand...

@Ghot

Nope. What apps you see is what's listed in the FRST logs I posted above.

This Program Manager issue immediately shows itself regardless if I install or reinstall the factory images from USB which Lenovo sent me.

I suspect it's likely one of the applications Lenovo uses or there is a problem with Windows Update and Lenovo drivers.

@Ghot
Here's food for thought...when I use Process Hacker to "log off", the log off process takes much longer. And then I am rerouted back to the Windows Sign In Screen.

About 85% of the time when I shutdown in this matter, I have no issues (no Program Manager error).

On occasion though, using the above method, my system hangs with the Black Screen of Death. I have to hold down the power button and shutdown forcibly.

Sammy888 said:

@Ghot

Nope. What apps you see is what's listed in the FRST logs I posted above.

This Program Manager issue immediately shows itself regardless if I install or reinstall the factory images from USB which Lenovo sent me.

I suspect it's likely one of the applications Lenovo uses or there is a problem with Windows Update and Lenovo drivers.

Click to expand...

I think you're right.
Might want to research the... LenovoVantageService
That seems to be the one that's having problems.

I'm one of those people that never runs manufacturer's utilities, and I'm not really a laptop person either.

The registry tweaks I gave you, were just to slow down the faulting programs, so you would have time to see what the error said.

You should probably wait to see what @AdvancedSetup says. Or even @zbook
zbook especially, is one of the log analyzers.




I just happened to see where you said...

Upon shutdown, there is a brief message popping up with one or two messages related to Program Manager preventing the shutdown. This happens really quick, and I can't click to see what application is the culprit

Click to expand...

...and I remembered the WaitToKillAppTimeout, tweak.
I've been using that tweak since the XP days.





Most of the regulars on here, read all the posts. IF we know the answer or even something that will be helpful... we post it. Beleive me, if I "knew" what was causing the problem, I would have posted it.

I DID know how to slow down... apps at shutdown, so I posted that. :)

Ghot said:

I think you're right.
Might want to research the... LenovoVantageService
That seems to be the one that's having problems.

I'm one of those people that never runs manufacturer's utilities, and I'm not really a laptop person either.

You should probably wait to see what @AdvancedSetup says. Or even @zbook
zbook especially, is one of the log analyzers.
I just happened to see where you said...
...and I remembered the WaitToKillAppTimeout, tweak.

Click to expand...

Ghot said:

I've been using that tweak since the XP days.

Most of the regulars on here, read all the posts. IF we know the answer or even something that will be helpful... we post it. Beleive me, if I "knew" what was causing the problem, I would have posted it.

I DID know how to slow down... apps at shutdown, so I posted that. :)

Click to expand...

@Ghot,
Thanks. I appreciate your help. I asked for a way to slow down the shutdown and you provided a solution. It didn't work, it worked and finally, it didn't work. The Program Manager appeared momentarily upon shutdown. It didn't pause like before.

Since I have nothing to lose, so I downloaded another Windows update. I also downloaded two optional Updates called Lenovo System Update from Microsoft. The two have the same bloody name but different version numbers. I downloaded them anyway. They were NOT listed as an update within Lenovo's Vantage software. I installed anyway.

I'm with you—not being big on laptops. I'm still using my 2009 W7 PC. It's slow now. Last year I bought what seemed to be good specs from Costco for a laptop. It was on sale as well. But I knew there was issues with chips and PCs so I figured I might as well use this laptop as my main PC until such a time the price of GPUs and RAM isn't selling for above retail. Looks like it will be awhile before that happens.

And the ONLY reason I use Lenovo software is this: my laptop does not have a removable battery which really ticks me off. Lenovo has a battery conservation mode where it will only charge up to 55-60% to conserve the battery. Without this, my battery will always be charged to 100%.

Having said that, I am open to the possibility the NVIDIA Geforce drivers may also be contributing to the issues as well. They could be using outdated code. But in any event, I need both the Lenovo and NVIDIA software and drivers.

@Sammy888

I understand. Many times I've thought about getting a laptop, then I read all the posts about problems that are harder to solve, because it's Windows AND manufacturer's software.

I bought a pre-built desktop back in 2000. That was the last time I did that. I learned my lesson.
Now... I'm looking forward to the day when we can build our own phones. :)

Might want to try calling Lenovo tech support and see what they have to say?



Sometimes... you get the right person, and they say: "Oh, just do this and that", and then it's all fixed.

@Ghot

I did contact Lenovo. I escalated my issue. They wanted me to send the laptop back to them. But I know how they operate. Instead, I insisted we do all the troubleshooting via email (they don't like to talk anymore). I performed every test imaginable that their techs do. At the end of the day, they said this was not a hardware but a software issue.

Lenovo then sent me by courier a W10 recovery USB which was more or less a factory image of my laptop. They said the pre-installed factory image on my laptop may be corrupt, so they sent me this USB instead.

The process to reimage my laptop was rather interesting. It took about 90+ minutes. The software wiped both my NVMe and HDD. I believe the partitions were removed and there was either a low-level or hard level format of the drives.

During the process, a lot of DOS scripts appeared on the screen.

At the end of this all, the problem still remained. I then thought I would reach out to all the tech gurus online who might know what the hell is going on and how to fix.

Depending on what the experts come back and say, I guess my next step is to use another utility to boot into, reformat D drive because that's where the WIndows Manager is stored. Then use Windows 11 ISO to install Windows without any Lenovo software, including bloatware like McAfee. However, my laptop battery will be continuously charging to keep it at 100%. If the problem persists, then obviously it's the NVIDIA drivers. I don't know what will happen with the Windows key since it's embedded into the bios. But W11 has it's own issues and I prefer to stay with W10.

Then again, perhaps my laptop is "possessed". When I went to do snip & sketch after installing the image for my laptop, the default naming convention becomes Annotation + date+time. Previously, it was always screenshot+name+date+time. I tried doing an app reset but it won't revert/default back to Screenshot. Argh.

Sammy888 said:

Can we focus on the above issues, please. What do you suggest resolving them because these are 'out of the box' clean installation errors that FRST picked up?

Click to expand...

A re-image from Lenovo is not a CLEAN install.

Program Manager is a window class name used by Windows Explorer I believe. It originated in Windows 3.1 and was pretty much fully removed from Windows in Vista. However, I'm not sure Microsoft removed all the text strings from all DLL and other files involved.

Windows Explorer has a new name - File Explorer


You might try the following possible solution

Force Restart
shutdown /r /f /t 0

Force Shutdown
shutdown /s /f /t 0


You can catch more flies with honey than with vinegar

AdvancedSetup said:

You can catch more flies with honey than with vinegar

Click to expand...

Just as my Spidey senses warned me a few days ago. You have nothing meaningful to contribute in resolving my issue.

Actually do know how to debug it, I've been doing this work for thirty years, but as the other user surmised. You're not polite and wish to argue so no sense in spending time on it.

Unfollowing topic.

Have a good day.