How to find the reason for the last shutdown in Windows Server 2003

windows-event-logwindows-server-2003

I have a windows server 2003 system which restarted for no apparent reason. Everything seems to be running fine now, but I want to know why it shutdown. I don't see any obvious signs of problems in the event logs. It is running on a UPS so I don't think it lost power.

  • How can I find the reason for the last shutdown in Windows Server 2003. I usually type a reason when I restart, and I have seen error codes when I go to the console after an unexpected restart. How can I retrieve that reason now?

  • Any other ideas about how to find out why the restart happened?

Best Answer

Open eventvwr → System.

View → Filter... → Event Id: 1074 and 1076. Comment field will contain what you typed in.

If there are no other events around that time to give you any clues, you may want to adjust your auditing settings to catch more items, but Sean Earp's link will probably give better details on that.

Related Topic