What is that popup on Windows 10 that disappears after a split second?

If you run Windows 10, you may have noticed a popup window being launched on the screen once a day, or even regularly.

It is spawned, and immediately closed again. This makes it difficult to understand what spawns it, why it is launched, and whether it is something that you need to be concerned about.

One of the issues of this is that you may be thrown out of fullscreen applications when that happens. Several users of Windows 10 reported that they get the window every hour or so, and that it makes playing games a nightmare because of that.

The file that gets executed every hour or so is called officebackgroundtaskhandler.exe, and you find it under C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe. If you log processes on your system for instance, you may notice that this is the case on your Windows 10 device.

officebackgroundtaskhandler

The issue has been a hot topic since April 15th when a user reported it on Microsoft's official Answer forum.

Is there a really, really good reason that the "OfficeBackgroundTaskHandlerRegistration" task (see it in Task Scheduler, Microsoft, Office) must run every hour? This is what it says that it does: "This task initiates Office Background Task Handler, which updates relevant Office data."

I ask, because it runs officebackgroundtaskhandler.exe in such a way that it flashes a window (itself) on the screen. Only instantaneously to be sure, but it's noticeable, especially once you catch onto what's happening. You can run the task manually if you want to see it without waiting.

If Microsoft Office runs on the Windows 10 machine, two tasks are scheduled to run OfficeBackgroundTaskHandler. They are:

  • OfficeBackgroundTaskHandlerLogon which runs when the user logs on to the system.
  • OfficeBackgroundTaskHandlerRegistration which runs every hour.
Read also:  Don't install Nvidia driver 375.57 on Windows 10

Solutions

The task window should not be launched when the task is run, and there are plenty of ways that Microsoft could have picked to hide the task window instead of spawning it every hour on the user system.

The two main options that you have are to disable the task, or to switch it from running under User to System.

Disabling the Task

windows 10 command popup office

It is unclear what the task does, and you should monitor Office closely after disabling it to make sure everything works as intended. The task is still run on logon though.

  1. Tap on the Windows-key, type Task Scheduler, and hit the Enter-key.
  2. Go to Task Scheduler > Task Scheduler Library > Microsoft > Office
  3. Locate the task OfficeBackgroundTaskHandlerRegistration.
  4. Right-click on the task, and select the disable option.

Run under System account

The second option that you have is to change the user group the task runs under. Switching it to System reportedly hides the popup window from spawning.

 

  • Tap on the Windows-key, type Task Scheduler, and hit the Enter-key.
  • Go to Task Scheduler > Task Scheduler Library > Microsoft > Office
  • Right-click on OfficeBackgroundTaskHandlerRegistration and select Properties.
  • Select "Change User or Group".
  • Type system.
  • Click ok.

Now You: Did you run into the spawning command window issue on Windows before?

 

Summary
Article Name
What is that popup on Windows 10 that disappears after a split second?
Description
If you run Windows 10, you may have noticed a popup window being launched on the screen once a day, or even regularly.
Author
Publisher
Ghacks Technology News
Logo
Advertisement
Please share this article

Facebooktwittergoogle_plusredditlinkedinmail


Filed under:


Responses to What is that popup on Windows 10 that disappears after a split second?

  1. jupe May 30, 2017 at 7:14 am #

    I've noticed similar update windows popping up that seem to be updating Ubuntu bash in Windows 10, I find those really annoying and unprofessional too, the update mechanism should be built into Windows Update IMO.

    • Bort May 30, 2017 at 11:55 pm #

      It'll be moved to the Store eventually.

  2. Slartibartfarst May 30, 2017 at 9:17 am #

    Thanks for the tip "Run under System account". That got rid of this mildly annoying event. I had not yet managed to figure out what was doing it, so your post saved me the trouble.

  3. Hollister May 30, 2017 at 9:50 am #

    Yesterday a friend told me about this happends on his computer.
    Now I can tell him the solution.
    Thanks

  4. Corky May 30, 2017 at 10:52 am #

    Why people put up with an company that updates its OS with next to no details on what it's updating is beyond me.

    This once mysterious popup is a perfect example as for weeks people didn't even know what it was, how can anyone use an OS where things happen and change without your knowledge, is it malware, is it a virus, no it's a badly implemented update to the OS.

    • Womble May 30, 2017 at 11:38 am #

      I can understand people getting frustrated with Windows, I do myself, but unless the grass gets greener on the other side I'm staying. No way that I'm cutting of my nose to spite my face.

    • kalmly May 30, 2017 at 2:39 pm #

      Lack of choice. I'm staying with Win7 until, like Womble says, the grass gets greener elsewhere. In fact, half as green would do. I'd settle for a Linux machine now if there were more software available for it.

      • Admin232 May 30, 2017 at 4:04 pm #

        There is a lot more software available on Linux that 10 years ago. Just used the scanning software and it worked perfectly on Linux Mint 18.1.

        I'm also running Windows 7 in Virtualbox which comes with Linux Mint. Its really easy to install a virtual Windows 7 and all the software I use runs exactly as it should. When I need an Windows 7 program, I just fire up the virtual machine. Works well. I start virtual Windows 7 every 3-4 days and use it a lot less than what I would have expected.

        I've been a Windows user for over 20 years, an MCSE and a programmer and have just migrated my main system to Linux. Great system.

    • Vin June 5, 2017 at 2:15 pm #

      Not everyone possesses the computer skills that you apparently do, Corky. As a matter of fact, you are in the EXTREME minority and apparently have some kind of grudge against Microsoft (probably a Linux user?). So, I have found your comment to be of no use and a bit frustrating. The OVERWHELMING majority of users do not have a clue nor do they care in the least what is going on in their updates. Just update my machine. As long as I remain functional, I am good to go. So, laugh at my technological ignorance if you will. I possess skills that you may not. I, for instance, can sell just about ANYTHING and make a half a million a year doing it. That means I can hire a couple of people like yourself to worry about what's going on in those pesky little updates.

    • Dorky June 10, 2017 at 10:08 pm #

      Because I get paid to.

      That is the ONLY reason.

  5. asd May 30, 2017 at 11:11 am #

    it's been driving me crazy... I went in Task Scheduler and disabled the ones you wrote and a bunch more useless shit. I hope that fixes it.

    • Bort May 30, 2017 at 11:50 pm #

      Yeah I can't believe how many tasks it had set for stuff which I do not want or need.

  6. Yuliya May 30, 2017 at 11:31 am #

    This is real? lol I've seen multiple posts about cmd prompt flashing, but I though people were just joking. You know, attributing it to the background initialisation of the NSA's tools :) Normally I would have not realised this, on my Win7 PC I have a few automated tasks which initiate some bat files, so I see this daily (I recently discovered "timeout 5" which adds a 5 second delay before closing the cmd prompt so now I know exactly what happens).

    • Admin232 May 30, 2017 at 3:52 pm #

      Cmd prompts can be started so that the prompt isn't visible while its running - don't know why a company like Microsoft would be make such fundamental errors. They write the software languages.

      • Bort May 30, 2017 at 11:52 pm #

        It's true, this was an inexcusable rookie error. In trying to hunt this down I discovered that nearly every program I have installed runs a conhost at one point or another, but I never noticed them until I went looking for this focus stealing little so and so.

  7. Thorky May 30, 2017 at 12:31 pm #

    I get a similar popup right after the windows desktop appears when starting windows, but in the bar on top I read the path C:\Windows\Windows32\reg.exe. I can't find any clue, that this file is part of the autostart procedure. Does anybody know, what is going on there?

    http://fs5.directupload.net/images/161220/ea5nkrv8.png

  8. pHROZEN gHOST May 30, 2017 at 1:51 pm #

    Please realize that everyone who uses the free version of Windows 10 is in fact one of the millions of beta testers for Microsoft.

    "C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe"

    Notice that this is with Office 16. I don't see the issue with Office 12 on one PC. And I don't see it with Libreoffice on another PC. You probably won't see it if you have no office-like software.

    • Bort May 30, 2017 at 11:53 pm #

      That's completely beside the point. I have this problem on Windows 10 Enterprise with Office 2016 Professional which you'd better believe big bucks have been paid for.
      This was an inexcusable bug for sure but no one else has anything even remotely approaching the productivity tools of Microsoft, I just wish they'd quit leveraging that fact to shovel more and more crap at me.

  9. Davin Peterson May 30, 2017 at 1:55 pm #

    This started happening after updating to the Creators Update. I sometimes see when the desktop is loading after logging in.

  10. Marco May 30, 2017 at 2:07 pm #

    THANK YOU! I've been struggling with this for some time now. I was even afraid it could be some malware and installed Malwarebytes 3 to detect it.

    • Bort May 30, 2017 at 11:54 pm #

      I did exactly the same thing. Really sad Microsoft has gotten so shoddy in their QA that we suspect malware from something that actually went unnoticed for a long time before this.

    • Vin June 5, 2017 at 2:39 pm #

      I'm kind of relieved. I thought it was malware as well. I thought someone was taking pics of me and/or screenshots of what was on my machine. LOL!

  11. Admin232 May 30, 2017 at 3:48 pm #

    Its easy to start a program without any visible GUI. Why on earth has Microsoft written its software in this fashion is just purely slack.

    Considering that Microsoft authors software languages with the capabilities to hide GUIs and its a very simple thing to do.

    Really dumb.

  12. bwat47 May 30, 2017 at 3:50 pm #

    So this is why I was randomly getting alt tabbed out of games all day yesterday... (and when this happened I did notice a window pop up and disappear super quickly)

  13. George May 30, 2017 at 5:10 pm #

    Nice tip, thank you. Windows 10 still feels unfinished and if they keep releasing major upgrades twice a year, it will stay unfinished forever.

  14. Phylis Sophical May 30, 2017 at 6:48 pm #

    Holy sh**t load of Tasks! I don't have MS Office but I'm shocked at how many tasks there are. I have a brand new HP Win10 with 12 GB RAM and it still runs slow. No wonder. Has anyone got a link to a site that would help figure out what is not essential, or is ok to change to run monthly rather than every day?

    • Jed May 30, 2017 at 8:31 pm #

      Ideally you should clean install Windows. Manufacturers such as HP preload their laptops with tons of software trials and adware which cause slowdowns. Make sure you download all the right drivers beforehand though.

  15. Norm May 30, 2017 at 7:12 pm #

    Errors? Scary. Even scarier if these are not errors.

  16. Bort May 30, 2017 at 11:46 pm #

    Oh my god thank you so much for this article. This drove me crazy over the holiday weekend and I was just setting up monitoring to try to figure it out. I saw the headline and instantly knew it had the answer I needed, a rare and good feeling indeed.

    This combined with the fact that you cannot remove individual programs from Office 2016 (like Skype for Business) is really making me question whether I need this stuff installed in the first place. Maybe I'll take another stab at OpenOffice, the only truly irreplaceable component is Outlook and I can get that standalone.

  17. Aldane May 31, 2017 at 2:31 am #

    just tried it thanks in advance

  18. Selman May 31, 2017 at 5:21 am #

    I have monitored this with ProcessMonitor, these are the things "officebackgroundtaskhandler.exe" does from start to finish, it may be different for different systems:

    http://imgur.com/a/G0ivM

    • A Douche June 1, 2017 at 4:48 pm #

      cool screenshot bro

  19. Gentoo Installer May 31, 2017 at 7:07 pm #

    Install Gentoo.

    • Gentoo User June 1, 2017 at 4:55 am #

      emerge -cav app-office/microsoftoffice

  20. Remy Lebeau June 1, 2017 at 5:25 pm #

    It appears it does it on Windows 7 too

  21. roy June 2, 2017 at 12:28 am #

    In the same screen where I typed "system" I see at the bottom it has selected from a drop down configure for box "window vista, windows 2008 server". I have windows 10 and that is available and not selected. I did not change it because it was not in your instructions. I thought this was odd.
    BTW this has only been going on since the last Microsoft update. The last update broke a lot of things I had configured to get windows 10 working in the first place.

    • roy June 4, 2017 at 8:02 pm #

      Well I have been monitoring this for a few days and because windows 10 was not selected seems to have no effect as to the outcome. Looks to me like this fix does work and I see no adverse behavior because of the fix. Well done Martin!

  22. jack June 2, 2017 at 3:57 pm #

    I do not have this service listed on my Windows 10 system. I am running MS Office 2010 and the popup windows only started recently.

    Any other suggestions?

  23. Thomas Horan June 2, 2017 at 6:37 pm #

    Hot crackers! You're a genius! Thanks a million! Having said that, sometimes, other apps cause the same problem. But THIS one is the one I've been chasing for over a month! God Bless!

  24. Andrew Morris June 2, 2017 at 9:04 pm #

    This was happening on a Win7 box with office 2016. So Office may be the actual culprit.

  25. Phil June 3, 2017 at 12:23 am #

    Ok! Gave this a shot! Thanks for the tip! I was being spooked by this. Don't like things coming up in the background. Went on a "kill unnecessary startup tasks" binge, which I suppose isn't necessarily a bad thing to do once in a while anyway.

  26. dina June 3, 2017 at 12:29 am #

    THANK YOU! Everyone once in a while it freezes my screen. So annoying.

  27. Helena June 3, 2017 at 12:55 am #

    Thank you, it was annoying and I am just so relieved it is not a virus!

  28. Helena June 3, 2017 at 12:59 am #

    Thank you for the solution

  29. Shirley A. Burton June 3, 2017 at 3:12 pm #

    I would put my computer into sleep mode, only for it to deactivate because of the weird pop-up. I tried this last night...and it worked perfectly. The hard drive stayed in sleep mode all night. Thank you for posting this. I'm sharing it on Facebook to help others who have this problem because I can't be the only one.

  30. Andy June 4, 2017 at 11:27 am #

    There are also log files under "c:\windows\temp" which relate to Office Click-To-Run Telemetry. The file names are %computername%-%date%-%time%.log

  31. Lutzinberlin June 5, 2017 at 4:51 pm #

    Martin, thanks so much for this - relieved to know that it is harmless and how to get rid of it!

  32. Roland Hall June 5, 2017 at 6:02 pm #

    Since this may have to be run after every update until Microsoft permanently sets it to run under SYSTEM, you can do the following from the command line:

    To see the task details in XML format:
    schtasks /Query /TN \Microsoft\Office\OfficeBackgroundTaskHandlerRegistration /XML ONE

    It will return:
    <?xml version="1.0" encoding="UTF-16"?>
    <Task version="1.2" xmlns="http://schemas.microsoft.com/windows/2004/02/mit/task">
    <RegistrationInfo>
    <Author>computerName\userName</Author>
    <Description>This task initiates Office Background Task Handler, which updates relevant Office data.</Description>
    <URI>\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration</URI>
    </RegistrationInfo>
    <Principals>
    <Principal id="Author">
    <GroupId>S-1-5-32-545</GroupId>
    </Principal>
    </Principals>
    <Settings>
    <DisallowStartIfOnBatteries>true</DisallowStartIfOnBatteries>
    <StopIfGoingOnBatteries>true</StopIfGoingOnBatteries>
    <MultipleInstancesPolicy>IgnoreNew</MultipleInstancesPolicy>
    <RunOnlyIfNetworkAvailable>true</RunOnlyIfNetworkAvailable>
    <IdleSettings>
    <StopOnIdleEnd>false</StopOnIdleEnd>
    <RestartOnIdle>false</RestartOnIdle>
    </IdleSettings>
    </Settings>
    <Triggers>
    <RegistrationTrigger>
    <Repetition>
    <Interval>PT1H</Interval>
    </Repetition>
    </RegistrationTrigger>
    </Triggers>
    <Actions Context="Author">
    <Exec>
    <Command>C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe</Command>
    </Exec>
    </Actions>
    </Task>

    Notice the principal user/group:

    <Principals>
    <Principal id="Author">
    <GroupId>S-1-5-32-545</GroupId>
    </Principal>
    </Principals>

    This is the SID for Users

    To set this to SYSTEM use:

    schtasks /Change /TN \Microsoft\Office\OfficeBackgroundTaskHandlerRegistration /RU SYSTEM

    It will return:

    SUCCESS: The parameters of scheduled task "\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration" have been changed.

    To verify from the command line, run the Query again and notice the user is now:

    <Principals>
    <Principal id="Author">
    <UserId>S-1-5-18</UserId>
    </Principal>
    </Principals>

    This is the SYSTEM user.

    Save this as a .cmd or .ps1 file and if the popups return, run it.

    • Martin Brinkmann June 5, 2017 at 6:06 pm #

      Roland, thanks for the detailed instructions, really helpful.

  33. Roland Hall June 5, 2017 at 6:52 pm #

    Martin...

    You're welcome. This has been very annoying. Thank you for the article. I knew if I didn't put it in a script, when it happened again, I'd be searching for this article. (O:=

    I made it a .cmd file on my desktop. I noticed if you don't Run as Administrator, you will get Access Denied.

  34. Emily June 9, 2017 at 7:44 pm #

    THANK YOU SO MUCH. I've noticed this program instantly pop up and disappear several times a day, and not only was the popping up annoying already, it was MINIMIZING MY LEAGUE OF LEGENDS DURING MATCHES!!!!! I was *fairly* certain that this wasn't malware or a virus as I've been EXTREMELY careful about those sorts of things, and windows defender hasn't found any threats ever on my computer, even after this problem started appearing. I looked in my programs and features under the control panel, and when I saw that two programs had updated about the same day this problem appeared - League and Microsoft Office - I had a sneaking suspicion that Office was the culprit. Well I eventually had to use Xsplit Broadcaster to RECORD MY SCREEN until this thing popped up again, then replayed the video trying to pause it at the right moment to see what the program was. Sure enough (and it took me a LOT of tries to catch the window, it's SO FAST), it was this dang office background task handler. This has been frustrating me since the 27th, thank you so much for sharing these solutions, it was driving me crazy!

  35. Lange June 10, 2017 at 9:38 am #

    I don't have Office (and i don't have the OfficeBackgroundTaskHandlerRegistration task) but i still have the CMD pop-up and closing (only on startup).
    As far as i can remember it started after one of the first Win10 updates. Annoying.
    Searched a bit to get rid of it, never found a solution.
    Since i don't have the OfficeBackgroundTaskHandlerRegistration task, i wonder what causes my CMD pop-up.
    Is there a way to halt the process and see what is causing it?

    • LogicDaemon June 16, 2017 at 9:21 pm #

      you can start procmon.exe (https://live.sysinternals.com/procmon.exe), set up recording to a file, and wait until popup appears. Then stop recording and look through launching processes to find it.

  36. Anonymous June 11, 2017 at 6:12 am #

    Thanks for this advise, I would pop=up whilst im playing games, no longer a problem

  37. LogicDaemon June 15, 2017 at 9:31 pm #

    Running it under system account is bad idea, because it uses profile of user it runs under. So when running under system, it will add trash to system account and won't actually do anything useful for user, like updating user documents (better just disable the task altogether).

    Better, task can be edited to run with its window hidden.

    Here is simple AutoHotkey script doing that (written right in the input box without actual testing, so tell me if there's an error):

    ;save to "run_officebackgroundtaskhandler.exe.ahk", change task to run autohotkey.exe with quoted path to script as an argument

    #NoEnv
    #NoTrayIcon
    If (A_Is64bitOS)
    EnvGet lProgramFiles, ProgramFiles(x86)
    Else
    EnvGet lProgramFiles, ProgramFiles
    RunWait "%lProgramFiles%\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe",,Hide
    ExitApp %ERRORLEVEL%

Leave a Reply