the server intermitten shutdown , suspect someone login and shutdown the server, any log can capture what cause th server shutdown ? if that person run the shutdown server option, will the system log show ? just want to find some cruel from the system log

Filter for event ID 1074. Windows 7 - Shut Down - View Details of Last Shutdown of Computer (applies to WS 2008 R2) http://www.sevenforums.com/tutorials/160855-shut-down-view-details-last-shutdown-computer.htmlRegards, Santosh I do not represent the organisation I work for, all the opinions expressed here are my own. This posting is provided "AS IS" with no warranties or guarantees and confers no rights.

Also, Description of the Shutdown Event Tracker (applies to WS 2003) http://support.microsoft.com/kb/293814Regards, Santosh I do not represent the organisation I work for, all the opinions expressed here are my own. This posting is provided "AS IS" with no warranties or guarantees and confers no rights.

Also, Description of the Shutdown Event Tracker (applies to WS 2003) http://support.microsoft.com/kb/293814Regards, Santosh I do not represent the organisation I work for, all the opinions expressed here are my own. This posting is provided "AS IS" with no warranties or guarantees and confers no rights.

Hi, Would you please let me know what the OS version of the server is? If it runs Windows Server 2003, as Santosh mentioned, we could use Shutdown Event Tracker to track the shutdown event and locate the cause of the auto shutdown error. For details, we could also refer to the following article. How Shutdown Event Tracker Works http://technet.microsoft.com/en-us/library/cc759722 Here are some similar threads as reference, we could try to refer to them to see if they help. WinServer 2003 automatic system shutdown http://social.technet.microsoft.com/Forums/en-US/winservergen/thread/0e3ad79f-cdbf-4d0c-a2e5-1877f5d390e0 automatic shutdown of windows server 2008 R2 http://social.technet.microsoft.com/Forums/en-US/winservergen/thread/8a7dbf01-79e6-4ee5-a02f-f020247cde71 Regards, Andy

Hi, Would you please let me know what the OS version of the server is? If it runs Windows Server 2003, as Santosh mentioned, we could use Shutdown Event Tracker to track the shutdown event and locate the cause of the auto shutdown error. For details, we could also refer to the following article. How Shutdown Event Tracker Works http://technet.microsoft.com/en-us/library/cc759722 Here are some similar threads as reference, we could try to refer to them to see if they help. WinServer 2003 automatic system shutdown http://social.technet.microsoft.com/Forums/en-US/winservergen/thread/0e3ad79f-cdbf-4d0c-a2e5-1877f5d390e0 automatic shutdown of windows server 2008 R2 http://social.technet.microsoft.com/Forums/en-US/winservergen/thread/8a7dbf01-79e6-4ee5-a02f-f020247cde71 Regards, Andy

http://technet.microsoft.com/en-us/library/cc960201.aspx also using group policy you can set the rights for shutting down the serverDarshana Jayathilake