W2K3 "Reason for reboot"

[Frankster]

Where can I access some sort of log of all the "reasons for reboot" that
have been typed into my W2K3 server during reboot operations?

-Frank

 

[insanity2k4]

Yeah. Look in the System log (Start -> Run -> eventvwr <OK>)

Right-click on the System log, go to View -> Filter. Change the source
dropdown box to "eventlog" and there ya go. You'll also have the
uptime heartbeats in there, but anything with the error icon is most
likely an unexpected shutdown, although it can be other things you
don't care about. Either way, it'll tell you what's up.

-Adam

 

[Frankster]

Thanks, but...

That only shoes unplanned stoppage, not planned (where you are still
required to enter a reason).

-Frank

 

[Guest]

sort the 'source' column and look for user32 sources, it should say something
like this>>

The process Explorer.EXE has initiated the shutdown of computer CX-MPS4 on
behalf of user DOMAIN\administrator for the following reason: Application:
Maintenance (Planned)
Reason Code: 0x84040001
Shutdown Type: shutdown
Comment: just for fun