UNSOLVED
Closed
R
RandyTwisp
1 Rookie
•
23 Posts
0
2128
May 23rd, 2021 10:00
XPS 13 (2016 touch screen) forced battery shutdown while plugged in -(event log included)
I recently replaced the original battery with a new OEM Dell battery. Powercfg / battery report shows it as above spec and it charges to 100%. I've run on battery a couple of times for an hour or two, with what seems like a normal dropdown in charge.
The problem is that the machine randomly does a normal Windows shutdown without any warning while plugged in and battery showing 100%. It starts up again without any error messages or programs (e.g., MS Word) indicating a crash or bad shutdown. I am using the Dell power mode, which I reset to factory defaults.
Here are the event log entries right around a shutdown:
Log Name: System
Source: Microsoft-Windows-Dhcp-Client
Date: 5/20/2021 9:50:44 AM
Event ID: 50104
Task Category: Service State Event
Level: Information
Keywords:
User: LOCAL SERVICE
Computer: DESKTOP-JOO1993
Description:
DHCPv4 client received shutdown notification
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">
50104
0
4
4
129
0x2000000000000000
59551
System
DESKTOP-JOO1993
Log Name: System
Source: Microsoft-Windows-Winlogon
Date: 5/20/2021 9:50:44 AM
Event ID: 7002
Task Category: (1102)
Level: Information
Keywords: (35184372088832)
User: SYSTEM
Computer: DESKTOP-JOO1993
Description:
User Logoff Notification for Customer Experience Improvement Program
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">
7002
0
4
1102
0
0x2000200000000000
59550
System
DESKTOP-JOO1993
1
S-1-5-21-3113541794-4245786582-3680094230-1001
Log Name: System
Source: User32
Date: 5/20/2021 9:50:44 AM
Event ID: 1074
Task Category: None
Level: Information
Keywords: Classic
User: SYSTEM
Computer: DESKTOP-JOO1993
Description:
The process C:\WINDOWS\system32\winlogon.exe (DESKTOP-JOO1993) has initiated the power off of computer DESKTOP-JOO1993 on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be found
Reason Code: 0x500ff
Shutdown Type: power off
Comment:
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">
1074
0
4
0
0
0x8080000000000000
59549
System
DESKTOP-JOO1993
C:\WINDOWS\system32\winlogon.exe (DESKTOP-JOO1993)
DESKTOP-JOO1993
No title for this reason could be found
0x500ff
power off
NT AUTHORITY\SYSTEM
Log Name: System
Source: EventLog
Date: 5/20/2021 9:50:44 AM
Event ID: 6006
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: DESKTOP-JOO1993
Description:
The Event log service was stopped.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">
6006
0
4
0
0
0x80000000000000
59548
System
DESKTOP-JOO1993
0000000000000000
Log Name: System
Source: Microsoft-Windows-Kernel-Power
Date: 5/20/2021 9:50:37 AM
Event ID: 524
Task Category: (223)
Level: Information
Keywords: (1024),(4)
User: SYSTEM
Computer: DESKTOP-JOO1993
Description:
Critical Battery Trigger Met
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">
524
0
4
223
0
0x8000000000000404
59547
System
DESKTOP-JOO1993
0
1
0
1
0x80
0
1
6
5
1
4
Log Name: System
Source: Microsoft-Windows-HttpEvent
Date: 5/20/2021 9:25:48 AM
Event ID: 15007
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: DESKTOP-JOO1993
Description:
Reservation for namespace identified by URL prefix http://127.0.0.1:8884:127.0.0.1/ was successfully added.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">
15007
0
4
0
0
0x80000000000000
59546
System
DESKTOP-JOO1993
http://127.0.0.1:8884:127.0.0.1/>
Log Name: System
Source: Microsoft-Windows-HttpEvent
Date: 5/20/2021 9:25:48 AM
Event ID: 15008
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: DESKTOP-JOO1993
Description:
Reservation for namespace identified by URL prefix http://127.0.0.1:8884:127.0.0.1/ was successfully deleted.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">
15008
0
4
0
0
0x80000000000000
59545
System
DESKTOP-JOO1993
http://127.0.0.1:8884:127.0.0.1/>
Log Name: System
Source: Service Control Manager
Date: 5/20/2021 9:25:47 AM
Event ID: 7040
Task Category: None
Level: Information
Keywords: Classic
User: SYSTEM
Computer: DESKTOP-JOO1993
Description:
The start type of the DBUtilDrv2 Service service was changed from demand start to disabled.
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event ">
7040
0
4
0
0
0x8080000000000000
59544
System
DESKTOP-JOO1993
DBUtilDrv2 Service
demand start
disabled
DBUtilDrv2
Log Name: System
Source: Service Control Manager
Date: 5/20/2021 9:25:47 AM
Event ID: 7045
Task Category: None
Level: Information
Keywords: Classic
User: SYSTEM
Computer: DESKTOP-JOO1993
Description:
A service was installed in the system.
Service Name: DBUtilDrv2 Service
Service File Name: \SystemRoot\System32\drivers\DBUtilDrv2.sys
Service Type: kernel mode driver
Service Start Type: demand start
Service Account:
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">
7045
0
4
0
0
0x8080000000000000
59543
System
DESKTOP-JOO1993
DBUtilDrv2 Service
\SystemRoot\System32\drivers\DBUtilDrv2.sys
kernel mode driver
demand start
Log Name: System
Source: Service Control Manager
Date: 5/20/2021 9:25:36 AM
Event ID: 7034
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: DESKTOP-JOO1993
Description:
The Dell Digital Delivery Service service terminated unexpectedly. It has done this 1 time(s).
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">
7034
0
2
0
0
0x8080000000000000
59542
System
DESKTOP-JOO1993
Dell Digital Delivery Service
1
440065006C006C004400690067006900740061006C00440065006C00690076006500720079000000
Log Name: System
Source: mrcbt
Date: 5/20/2021 9:25:25 AM
Event ID: 5002
Task Category: None
Level: Information
Keywords:
User: N/A
Computer: DESKTOP-JOO1993
Description:
The size of the $LogFile on device \Device\HarddiskVolumeShadowCopy2 is 0x4000000 bytes with 0x1 fragments
Event Xml:
http://schemas.microsoft.com/win/2004/08/events/event">
5002
0
4
0
0
0x8000000000000000
59541
System
DESKTOP-JOO1993
\Device\HarddiskVolumeShadowCopy2
0x4000000
0x1
RandyTwisp
1 Rookie
•
23 Posts
1539
0
Posted May 23rd, 2021 17:00
I doubt the battery is on its last legs, given its powercfg stats and how long it ran without draining unusually. But that doesn't mean there isn't something bad in its circuitry.
I tried to buy a new battery from Dell but they refused to sell me one or even agree to simply install a new battery. They said they'd send a shipping box and charge over $100 just to evaluate the machine, and it could take a week or two for that.
My wife is ready to trash the machine and buy a new one. A techie friend suggest that I first put back the old battery. If that doesn't work better (showing it's not a battery problem), buy a Lenovo.
RandyTwisp
1 Rookie
•
23 Posts
1489
0
Posted June 2nd, 2021 17:00
I have no solution yet, but some more info I found in Event Viewer. These are "details" from the battery shutdown event:
EventData Index 0 ActiveBatteryCount 1 RemainingPercentage 0 IsAcOnline 1 BatteryActionInternalFlags 0x80 IsPowerActionCallIgnored 0 IsPowerPolicyEnabled 1 PowerPolicyAction 6 PowerPolicyBatteryLevel 5 PowerPolicyEventCode 1 PowerPolicyMinState 4 CloudAtlas
1 Rookie
•
5 Posts
•
17 Points
3
0
Posted September 18th, 2026 15:09
I am seeing an extremely similar shutdown sequence on a Dell G5 5500.
In my case, Windows logs: Event 524 – Critical Battery Trigger Met
followed by:
winlogon.exeinitiating power-off on behalf ofNT AUTHORITY\SYSTEM, then Event 6006 and Kernel-Power Event 109.The important point is that the laptop is connected to AC at the time. The Event 524 data reports:
RemainingPercentage = 0IsAcOnline = 1I have instrumented the battery stack and captured one incident in detail. Approximately 10 seconds before the shutdown, the battery was reporting about 83%, 56,529 mWh and 17,289 mV. Immediately after the Event 524 trigger, capacity and voltage both went to zero, while AC remained online and the battery device remained present.
The battery telemetry later recovered, meaning this was not a real physical discharge.
The problem has also occurred with a replacement battery, so it is increasingly difficult to explain this as a simple battery-pack failure.
I am currently testing whether DellTechHub/DTP interaction with the embedded controller may be involved, because a newer Dell Community case has captured a very similar instantaneous zero-capacity/zero-voltage condition immediately after a Dell DTP EC battery query.
Request to Dell: please investigate whether this Event 524 pattern is caused by an EC/ACPI battery-state reporting defect and provide an appropriate BIOS/EC or DellTechHub/DTP patch. Windows appears to be acting correctly on invalid battery data being supplied upstream.
Mary G
6 Operator
•
20095 Posts
1556
0
Posted May 23rd, 2021 14:00
If the battery came from an online seller and not Dell or Dell Parts, it could be used and on its last legs or worse. To test remove the battery and use the adapter alone. If that fixes things you can use the laptop as a desktop replacement. Today's batteries only last 2 years or so (even on the shelf) and genuine replacements are hard or impossible to find. More info-- Dell Laptop Battery - Frequently Asked Questions | Dell US