The SYSPREP utility does not shut down the system gracefully and leaves unexpected shutdown message (Event 6008) in the system event log. For additional information, see the following article or articles in the
Microsoft Knowledge Base:
How Customers Can Obtain System Preparation Tool for WinNT 4.0
For more information about Event 6008, please see the following article in the Microsoft Knowledge Base:
Why WinNT Reports 6005, 6006, 6008, and 6009 Event Log Entries
This problem occurs because the SYSPREP utility does not shut down the system gracefully after completing the mini setup.
To resolve this problem, obtain the latest service pack for Windows NT 4.0 or
the individual software update. For information on obtaining the
latest service pack, please go to:
how to obtain the latest windows nt 4.0 service pack
For information on obtaining the individual software update, contact Microsoft
Product Support Services. For a complete list of Microsoft Product Support
Services phone numbers and information on support costs, please go to the
following address on the World Wide Web:
Microsoft has confirmed that this is a problem in the Windows NT 4.0 System Preparation tool. This problem was first corrected in Windows NT version 4.0 Service Pack 5.