Windows Event ID 38 – Kernel-Power: System Thermal Zone Temperature

Start by examining the specific thermal event details in Event Viewer to understand which thermal zones are affected.

1. Open Event Viewer by pressing Win + R, typing eventvwr.msc, and pressing Enter
2. Navigate to Windows Logs → System
3. Filter for Event ID 38 by right-clicking System → Filter Current Log → Enter 38 in Event IDs field
4. Double-click recent Event ID 38 entries to view detailed information including thermal zone data
5. Note the timestamp patterns to identify if thermal events correlate with specific system activities

Use PowerShell to extract thermal events with detailed information:

Get-WinEvent -FilterHashtable @{LogName='System'; Id=38; StartTime=(Get-Date).AddDays(-7)} | Select-Object TimeCreated, Id, LevelDisplayName, Message | Format-Table -Wrap

Use Windows Performance Toolkit and PowerShell to monitor real-time thermal data and correlate with Event ID 38 occurrences.

1. Open Performance Monitor by typing perfmon.msc in Run dialog
2. Add thermal-related counters: Processor Information → % Processor Performance and Thermal Zone Information → Temperature
3. Create a data collector set to log thermal data over time
4. Monitor CPU utilization during thermal events to identify correlation

Use PowerShell to check current thermal zone status:

# Get thermal zone information
Get-WmiObject -Class Win32_PerfRawData_Counters_ThermalZoneInformation | Select-Object Name, Temperature

# Monitor processor thermal throttling
Get-Counter "\Processor Information(_Total)\% Processor Performance" -SampleInterval 5 -MaxSamples 12

Check Windows thermal management settings in registry:

# View thermal policy settings
Get-ItemProperty -Path "HKLM\SYSTEM\CurrentControlSet\Control\Power\PowerSettings\54533251-82be-4824-96c1-47b60b740d00\*"

Perform physical inspection and hardware diagnostics to identify cooling system issues causing thermal events.

1. Check system fans are operational and spinning at appropriate speeds
2. Inspect air vents and filters for dust accumulation or blockages
3. Verify thermal paste application on CPU and GPU heat sinks
4. Monitor ambient temperature in server room or equipment area
5. Use hardware monitoring tools to check individual component temperatures

Use PowerShell to check fan speeds and hardware sensors:

# Check system fans via WMI
Get-WmiObject -Class Win32_Fan | Select-Object Name, Status, DesiredSpeed

# Get temperature sensors
Get-WmiObject -Class MSAcpi_ThermalZoneTemperature -Namespace "root/wmi" | Select-Object InstanceName, CurrentTemperature

Run Windows Hardware Diagnostic to check cooling system:

# Start hardware diagnostic
mdsched.exe

Examine Windows power management settings and ACPI thermal zone configuration to optimize thermal behavior.

1. Open Device Manager and expand System devices
2. Locate ACPI Thermal Zone entries and check for driver issues
3. Review power plan settings in Control Panel → Power Options
4. Check processor power management settings for thermal throttling configuration
5. Verify BIOS/UEFI thermal settings are appropriate for the workload

Use PowerShell to analyze power configuration:

# Get current power plan
Get-WmiObject -Class Win32_PowerPlan -Namespace "root\cimv2\power" | Where-Object {$_.IsActive -eq $true}

# Check processor power management settings
powercfg /query SCHEME_CURRENT SUB_PROCESSOR

# List all thermal zones
Get-WmiObject -Class Win32_PerfRawData_Counters_ThermalZoneInformation | Format-List

Modify power settings to reduce thermal stress:

# Set maximum processor state to 90% to reduce heat generation
powercfg /setacvalueindex SCHEME_CURRENT SUB_PROCESSOR PROCTHROTTLEMAX 90
powercfg /setactive SCHEME_CURRENT

Deploy comprehensive thermal monitoring solution using Windows Event Forwarding and custom PowerShell scripts for proactive thermal management.

1. Configure Windows Event Forwarding to centralize thermal events from multiple systems
2. Create custom PowerShell scripts to correlate thermal events with performance data
3. Set up automated alerts when thermal thresholds are exceeded
4. Implement thermal trend analysis using Windows Performance Toolkit
5. Deploy third-party thermal monitoring tools for enhanced visibility

Create advanced thermal monitoring script:

# Advanced thermal monitoring script
$thermalEvents = Get-WinEvent -FilterHashtable @{LogName='System'; Id=38; StartTime=(Get-Date).AddHours(-1)}
$cpuTemp = Get-WmiObject -Class MSAcpi_ThermalZoneTemperature -Namespace "root/wmi"

foreach ($event in $thermalEvents) {
    $eventData = [xml]$event.ToXml()
    Write-Host "Thermal Event: $($event.TimeCreated) - Zone: $($eventData.Event.EventData.Data)" -ForegroundColor Yellow
}

# Check if temperature exceeds threshold
$maxTemp = ($cpuTemp.CurrentTemperature | Measure-Object -Maximum).Maximum / 10 - 273.15
if ($maxTemp -gt 70) {
    Write-Warning "High temperature detected: $maxTemp°C"
    # Send alert or trigger cooling response
}

Configure Windows Event Forwarding for centralized monitoring:

# Configure event forwarding subscription
wecutil cs thermal-monitoring.xml

# Enable event forwarding service
Set-Service -Name WinRM -StartupType Automatic
Start-Service WinRM