Windows Server 2003: Shutdown Event tracker

How often do you need to find administrator documented shutdown explanations in Windows server 2003? Hmm… almost never? Yeah, me too.

For quick reference, if you’re looking for shutdown explanations in event viewer (start>run>eventvwr), you’re going to want to check the system log, and filter for ID’s 1074 and 1076.