John
You need to look in the System log.
The start up is fairly obvious as you will see a string of Information
Reports over a period of one / two minutes. At no other time do you see
so many reports over such a short space of time. A Shutdown is not so
obvious but the report below occurs on my system.
Event Type: Information
Event Source: EventLog
Event Category: None
Event ID: 6006
Date: 13/12/2008
Time: 02:01:02
User: N/A
Computer: PC0939
Description:
The Event log service was stopped.
--
Hope this helps.
Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~