Search results
People also ask
What is Shutdown event tracker?
How to enable Shutdown event tracker in Windows 10?
Where is the shutdown event tracker stored?
Does Windows Server 2003 support Shutdown event tracker?
Does Windows 11 display Shutdown event tracker?
How do I enable display Shutdown event tracker in Winaero?
Sep 19, 2020 · Shutdown Event Tracker is a tool that prompts users to record a reason why they restart or shut down the computer. This information is available for review in the event log. When Shutdown Event Tracker is enabled, users cannot shut down or restart the computer without providing a reason.
May 21, 2023 · What is a Shutdown Event Tracker? Shutdown Event Tracker is a Windows Server and Windows 11/10/8/7/Vista feature that you can use to track the reason for system shutdowns...
- Overview
- How to determine shutdown reason on Windows 11 from Event Viewer
- How to determine shutdown reason on Windows 11 from PowerShell
- How to determine shutdown reason on Windows 11 from Command Prompt
- More resources
- Get the Windows Central Newsletter
How-to
If your PC shut down unexpectedly or did it restart automatically, Use these instructions to discover why this happened on Windows 11 or 10.
Jump to:
•Even Viewer
•PowerShell
•Command Prompt
To check the Event Viewer logs and determine why the device was shut down or restarted on Windows 11, use these steps:
•Open Start.
•Search for Event Viewer and click the top result to open the app.
•Browse the following path: Event Viewer > Windows Logs > System
•Right-click the System category and select the "Filter Current Log" option.
•In the "All Event ID" textbox, include the following ID numbers separated using a comma:
To find out the reason Windows 11 (or 10) shutdown with PowerShell, use these steps:
•Open Start.
•Search for PowerShell and click the top result to open the app.
•Type the following command to view the event logs and press Enter: Get-WinEvent -FilterHashtable @{ LogName = 'System'; Id = 41, 1074, 6006, 6605, 6008; } | Format-List Id, LevelDisplayName, TimeCreated, Message
•Check the log information to determine the time and reason for the shutdown.
After you complete the steps, the events will indicate the date, time, and why Windows 11 was shut down or rebooted.
To check why the computer shutdown with Command Prompt, use these steps:
•Open Start.
•Search for Command Prompt and click the top result to open the app.
•Type the following command to view the event logs and press Enter: wevtutil qe System /q:"*[System[(EventID=41) or (EventID=1074) or (EventID=6006) or (EventID=6005) or (EventID=6008)]]" /c:100 /f:text /rd:true
•Quick note: The above command will check the 100 more recent logs for the shutdown information. You can modify the "/c:100" option with a different number to check more or fewer events.
•Check each log description to determine the time and reason for the shutdown.
For more helpful articles, coverage, and answers to common questions about Windows 10, visit the following resources:
•Windows 11 on Windows Central — All you need to know
•Windows 10 on Windows Central — All you need to know
Windows 11
$99.99
at Best Buy
All the latest news, reviews, and guides for Windows and Xbox diehards.
Contact me with news and offers from other Future brandsReceive email from us on behalf of our trusted partners or sponsors
Dec 26, 2023 · Shutdown Event Tracker is a Microsoft Windows Server 2003 and Microsoft Windows XP feature that you can use to consistently track the reason for system shutdowns. You can then use this information to analyze shutdowns and to develop a more comprehensive understanding of your system environment.
Jul 13, 2023 · When Shutdown Event Tracker is enabled on Windows, users cannot restart or shut down the computer without giving a reason. In this article, you'll learn how to enable shutdown event tracker in Windows 10.
Mar 6, 2018 · The Shutdown Event Tracker is a special dialog that prompts users to record a reason why they restart or shut down the computer. This information can be retrieved later from the Event Log.
Jan 7, 2021 · The Shutdown Event Tracker enables the user or application to document the reason for shutting down or restarting the system. The user is prompted to fill in information when selecting Shut Down from the Start menu, or when using Shutdown.exe.
