I have a remote machine that runs on Windows 7, it gets logoff by closing all running application and the gets logged in again automatically. It happens every day but not on specific time and without specific task.
After reviewing Event logs as shown above in image, i found few Events with Id 7001 & 7002 with task category 1101 and 1102 respectively.
I use Windows 7. We are suffering from this problem with other 3 machines having same configuration.
To resolve this, I searched on internet and applied the solution regarding customer experience which is mentioned in the link below:
Can anyone help me to track this issue ?? Am i on right direction to resolve this problem?
After suggestion given by @TwistyImpersonator, i can say following things from detailed Event viewer (Image are attached at the end):
In System events:
following events always occurred AFTER 'Winlog' events:
Service Control Manager-7036-None-The Shell Hardware Detection service entered the stopped state.
And in Application event, following events occurred around the same time frame
Warning-09.11.2017 18:19:29-User-Profile Service-1530-None-Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.
DETAIL - 1 user registry handles leaked from \Registry\User\S-1-5-21-1277090162-4221482773-868009429-3552: Process 272 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-1277090162-4221482773-868009429-3552\Printers\DevModePerUser
Information-09.11.2017 18:19:29-Desktop Window Manager-9009-None-The Desktop Window Manager has exited with code (0x40010004)