Any way to check windows logs for shutdowns?

[TheMidnightNarwhal]

So I run a server on my PC and sometimes I come back and see my PC is closed. Can I check some kind of logs or PC shutdowns in windows? Thanks

[RH00D]

If its Windows 8.x/Server 2012 or higher just right-click start button, click Event Viewer (if other version of Windows just type Event Viewer in search).

 

Navigate Windows Logs -> System then select "Filter Current Log" then put 1074 into the ID text box, click OK and it list all shutdown/restart events.

 

 

 

EDIT: If you would like to take this even further you can make Windows display a message box at user logon that there was a shutdown/restart. I'll edit again with instructions in a few minutes.

 

Okay, so for the message prompt at logon follow these instructions.

 

Step 1: Open Notepad, write exactly that text and save it as sd.vbs. Make sure when you save, the save as file type is "All Files (*.*)" otherwise it'll save it as sd.vbs.txt.

 

Step 2: Search for/open Task Scheduler. Click Create Basic Task.

 

Step 3: Give the task a name.

 

Step 4: Select "When I log on".

 

Step 5: Select "Start a program".

 

Step 6: Navigate to the sd.vbs file you created earlier.

 

Step 7: Click "Finish" and close Task Scheduler.

 

Now every time you log on from a shutdown/restart you'll see this message box below.

[Opcode]

You can view system and application logs in the event viewer. I would also check your power options to ensure the machine isn't just set to go to sleep.

[TheMidnightNarwhal]

You can view system and application logs in the event viewer. I would also check your power options to ensure the machine isn't just set to go to sleep.

 

Yeah checked that after, it seems to be that, was set to sleep 30 minutes.  But, even though my PC would go more than 30 minutes, weird.

[TheMidnightNarwhal]

If its Windows 8.x/Server 2012 or higher just right-click start button, click Event Viewer (if other version of Windows just type Event Viewer in search).

 

Navigate Windows Logs -> System then select "Filter Current Log" then put 1074 into the ID text box, click OK and it list all shutdown/restart events.

 

snip

 

Nothing in the logs. I guess it was the 30 minute to sleep battery power, even though my PC lasted more than 30 minutes.

[Opcode]

Yeah checked that after, it seems to be that, was set to sleep 30 minutes.  But, even though my PC would go more than 30 minutes, weird.

I'm not sure entirely how Windows checks for how long the PC is idle. I would imagine GetLastInputInfo would be called to calculate how long the machine has been idle.

 

Is this what you changed? If so then that should fix the problem.

[TheMidnightNarwhal]

I'm not sure entirely how Windows checks for how long the PC is idle. I would imagine GetLastInputInfo would be called to calculate how long the machine has been idle.

 

Is this what you changed? If so then that should fix the problem.

 

 

Yeah, I changed that,