Customer reported that every time they login onto a Windows Server 2008 box, after the Altiris Agent finished installing, they get a popup window referring to "Windows has recovered from an unexpected shutdown". So far it has been noticed just on Win2008 R2 boxes.
We looked at the System logs and we found multiple references for the Event ID: 7002:
Log Name: System
Event ID: 7002
Task Category: (1102)
User Logoff Notification for Customer Experience Improvement Program
This issue has been resolved in the SMP 7.1 SP2 release.
A pointfix for SMP 7.1 SP1 version has been created. It should be part of the SMP 7.1 SP1 Rollup v2 release or as a stand-alone release of the Altiris Agent. Please contact Support if you need this pointfix.
A workaround can be found here in case that you can't move to the SMP 7.1 SP2 release:
"The Windows Server 2008 task scheduler has a large number of new features and interface changes, but some administrators may want to reconfigure the default configuration. For instance, there are three scheduled tasks created with installations of Windows Server 2008 that, if permitted by an administrator, will collect and send usage data to Microsoft as part of the Customer Experience Improvement Program (CEIP).
If you decide to disable the CEIP scheduled tasks, follow these steps. From the Windows Server 2008 Server Manager, launch the Task Scheduler applet and browse to Task Scheduler Library | Microsoft | Windows | Customer Experience Improvement Program. Right-click the Consolidator task and select Disable.
Browse to the Server section of the Customer Experience Improvement Program task folder, and you’ll see ServerCeipAssistant and ServerRoleCollector. Right-click the scheduled tasks and select Disable."
The CEIP data collection is a one-way traffic of usage information of Microsoft products from your installations to Microsoft on the Internet.
Symantec Management Platform 7.1 MP1, 7.1 SP1