This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(6.4, 98%, 10%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERD%3C/text%3E%3C/svg%3E)
I have created a windows service using the complete service sample provided by microsoft OneCodeTeam
I am not able to intercept the SHUTDOWN event on system shut down.A snippet of the code is as below:
void WINAPI CServiceBase::ServiceCtrlHandler(DWORD dwCtrl)
{
extern void AddEntryLog(char*);
switch (dwCtrl)
{
case SERVICE_CONTROL_STOP: s_service->Stop(); break;
case SERVICE_CONTROL_PAUSE: s_service->Pause(); break;
case SERVICE_CONTROL_CONTINUE: s_service->Continue(); break;
case SERVICE_CONTROL_SHUTDOWN:AddEntryLog("shutdown event"); s_service->Shutdown(); break;
case SERVICE_CONTROL_PRESHUTDOWN: s_service->PreShutDown(); break;
case SERVICE_CONTROL_INTERROGATE: break;
default: break;
}
}
The code AddEntryLog(msg) does not execute.
Your help is appreciated.
Did you check if AddEntryLog works in case of other events?
Yes I am able to intercept the OnStop() but not ShutDown. I am having to shutdown the system to test OnShutdown processing which is a problem.
If AddEntryLog is writing to an eventlog, it may be that the event system is shutting down. If that's what it does, try writing to text file instead.
According to documentation (https://learn.microsoft.com/en-us/windows/win32/services/service-control-handler-function), it seems that you must call SetServiceStatus with the SERVICE_ACCEPT_SHUTDOWN code on some stage. Then the service will receive SERVICE_CONTROL_SHUTDOWN.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(268.8, 45%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EC%3C/text%3E%3C/svg%3E)
Either that, or pass fCanShutdown = TRUE to constructor of CServiceBase to use the method in class to make that call for you.
The parameter fCanShutdown is TRUE is the default value to the constructor and I have not changed it. The log is a normal text file and not any system event log. Is there a way to test Shudown event without having to shutdown?.
The message is sent by SCM so you can only test it with system shutdown.
However you can debug the service running in VM with remote debugger so you don't need to restart your tools every time.
I don't think something like AbortSystemShutdown() API will help because as Windows sends shutdown message to services, the shells and user sessions have already teared-down and there is little point to keep system running at that time.
From your description of behaviour, you may also want to check whether "fast startup" is enabled in the target system.