Hi all,
I'm still on investigating, but had to interrupt for some time due to illness. Unfortunately the number of complains have increased to around 5 in mean time, and we need to find out how to get rid of that problem.
The "power-cut-test" I have announced recently has also been performed in mean time, but after 50 power off/on sequences w/o shutting O/S down properly - as seen on customer's device - did not raise that problem (in meaning of UWFUtiliy was still working). We did this a second time where we UWF was enabled, but we were not able to reproduce the problem in that way.
There was an interesting insight during this tests: As already mentoined, we have seen lots of critical entries in the System event log that tell that the system has restarted w/o shutting down properly. During our tests such message were only produced when UWF was disabled (note: System.evtx is written to a non-protected partition). I already assumed that s/o at customer's site forgot to enable UWF, but know I'm in doubt since number of error reports of this kind increases. In looking forward that customers claim/assure they have UWF enabled, the new question is,**if UWF has/may has become disabled w/o being instructed to to so ** (neither by uwfmgr nor UWFUtility). UWF also has an own eventlog, but I didn't know that before and therefore logs to protected volume - so I also can see that UWF was set to enabled, but no information when it has become disabled.
A second device has been returned to our site that still has the problem. Is there anything I can inspect that might help to find out what happened?
Regarding UWFUtility itself, here is what the Application EventLog has recoreded (translated):
Record # 1: Application error, EventId 1000 (Category: Application crash)
Application: UWFUtility.exe, Version: 2.0.0.0, Timestamp: 0x599a0c08
Name of faulting module: KERNELBASE.dll, Version: 10.0.17763.1728, Timestamp: 0x16e07148
Exception code: 0xe0434352
Error offset: 0x001226c2
ID of failing process: 0x7fc
Startup time of faulting application: 0x01d7941b7f472737
Path to faulting application: C:\Program Files\UWFUtility\UWFUtility.exe
Name of faulting module: C:\Windows\System32\KERNELBASE.dll
**Record #2: .Net Runtime, EventId 1026 (Category: None)
Application: UWFUtility.exe
Framework version: v4.0.30319
Description: The process has been terminated because of an unhandled exception.
Exception information: System.Management.ManagementException
at System.Management.ManagementException.ThrowWithExtendedInfo(System.Management.ManagementStatus)
at System.Management.ManagementObjectCollection+ManagementObjectEnumerator.MoveNext()
at UWFUtility.UWFUtility.UWFStatus()
at UWFUtility.UWFUtility..ctor()
at UWFUtility.Program.Main()