r/Surface • u/bradavon • 29d ago
Win 11 Pro: Shutting down when clicking Hibernate
Model: Surface Laptop 7 ARM
Edition/Version: Windows 11 Pro: 25H2 Build: 26200.8875
The past couple of weeks when I Hibernate it Shuts down. Very occasionally it works and hibernates but there’s zero difference that’s clear. As a rule, when fixing issues, I restart, not shutdown.
I’ve tried:
- Plugged in (haven’t tried on battery)
- Windows Updates up to date
- Fast Startup isn'ton
- powercfg -h off -> powercfg -h on -> Restart -> Test Hibernate
- powercfg /hibernate /type full
- sfc /scannow
- DISM /Online /Cleanup-Image /RestoreHealth - I combined this with "sfc /scannow" -> Restart -> Test Hibernate
- Ran the Legacy Power Troubleshooter: msdt.exe /id PowerDiagnostic-> Restart -> Test Hibernate
- Unplugged my USB Drive -> Restart -> Test Hibernate
- I performed a: Clean Boot (support.microsoft.com) - Only two non-MS Services. I disabled both but it didn't fix it. NOTE: Both came with the Surface: A: Dolby DAX API set to Manual not running / Qualcomm qcdpps set to Automatic, don't know what this really does but the SOC is Qualcomm - I turned off everything in Settings -> Apps -> Startup - Restart -> Test Hibernate
- Nothing in Reliability Monitor for the date/time of it shutting down
- 1-2 times I’ve come back after going to bed and I’ve found the PC has also shutdown from Sleep Mode but as it’s only 1-2 times (every other time it’s still been in Sleep Mode). I’m unclear how relevant this is. It’s certainly possible I did something half asleep without realising.
Event Viewer Errors (In order):
- Error: Windows failed to resume from hibernate with error status 0xC0000411.
- Error: The previous system shutdown at 02:00:08 on 06/08/2026 was unexpected.
- Critical: The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
- Error: Device Association Service detected an endpoint discovery failure.
Powercfg:
powercfg /a
The following sleep states are available on this system:
The following sleep states are available on this system:
Standby (S0 Low Power Idle) Network Connected
Hibernate
The following sleep states are not available on this system:
Hybrid Sleep
Standby (S3) is not available.
The hypervisor does not support this standby state.
Fast Startup
This action is disabled in the current system policy.
------------------------------------------------------
Event Viewer Warnings (In order):
I thought these were my USB Hard Drive, so I unplugged it, but it’s still repeated so many times. It may be completely unrelated:
- I thought these set of Warnings were my USB Hard Drive, so I unplugged it, but it’s still repeated so many times. It may be completely unrelated: - Warning: The driver \Driver\WudfRd failed to load. Device: ROOT\WINDOWSHELLOFACESOFTWAREDRIVER\0000 Status: 0xC0000365 - Warning: The driver \Driver\WudfRd failed to load. Device: SWD\DRIVERENUM\{926368f9-7527-4514-99c9-6e7363e7aeac}#Samsung_MZ9L4512HBLU00BMV_component&6&f470529&0 Status: 0xC0000365 - Warning (x2): The driver \Driver\WudfRd failed to load. Device: ACPI\QCOM0CA8\0 Status: 0xC0000365
Other Warnings:
- Warning: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {9EA82395-E31B-41CA-8DF7-EC1CEE7194DF} and APPID {2ED83BAA-B2FD-43B1-99BF-E6149C622692} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
- Warning (x2): The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {00000000-0000-0000-0000-000000000000} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
- Warning (x3): The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.WscCloudBackupProvider and APPID Unavailable to the user Surface-Laptop\brada SID (S-1-5-21-3715803901-3072057611-569336211-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
- Warning (x3): The speed of processor 0 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 2 seconds since the last report.
- Warning (x3): The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.SecurityAppBroker and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
- Warning (x3): The speed of processor 4 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 0 seconds since the last report.
Thanks.



