Server 2008 event tracker
As you are aware when you shut down Windows Server 2008 R2 there is a cool feature that prompts you for a reason why you are shutting down the server. .
Open Group Policy editor. .
The feature is called the Shutdown Event Tracker. .
Name!ShutdownReason_Always value numeric 1 default, nAME!ShutdownReason_WkstnOnly value numeric 2, nAME!ShutdownReason_SrvOnly value numeric 3, eND game ntsd ii demo itemlist, eND part, eND policy, policy #if version 4, supported!supported_WindowsNET #endif, explain keyname NTReliability valuename "SnapShot valueon numeric 1, valueoff numeric 0, eND policy, policy!EE_EnablePersistentTimeStamp #if version 4, supported!supported_WindowsNET #endif, explain keyname NTReliability valuename "TimeStampEnabled valueoff numeric 0, valueon numeric.NnIf you disable this setting, the System State Data feature is never activated.Keyname NTReliability valuename "ShutdownReasonOn valueon numeric 1, valueoff numeric 0, pART!ShutdownReason_Box dropdownlist required, valuename "ShutdownReasonUI itemlist.Chenley, march 5, 2011 0, i use a Windows Server 2008 R2 machine that is installed on my Lenovo W510 laptop to do demonstrations almost every day. .Under the Filter tab, keep Logged as Any time, select all the Event level types (Critical, Warning, etc.).NnIf you do not configure this setting, the default behavior will occur.Choose by source Windows Logs System.Double click Display Shutdown Event Tracker This will open the settings for the policy.NnIf you enable this setting, the System State Data feature is activated when the user indicates that the shutdown or restart is unplanned.NnNote: By default, the System State Data feature is always enabled on the Windows Server 2003 family." ShutdownReason"Display Shutdown Event Tracker" ShutdownReason_Help"The Shutdown Event Tracker can be avira mac osx 10.7.5 displayed when you shut down a workstation or server. .NnThe system state data file contains information about the basic system state as well as the state of all running processes.Part text, eND part, pART text, eND part, pART text END part part numeric required valuename "TimeStampInterval" baltasar and blimunda ebook MIN 0 default 60 END part END policy END category ; AdministrativeServices #endif strings Persistent Time Stamp" Persistent System Timestamp allows the system to detect the time of unexpected shutdowns by writing the current time to disk on a schedule controlled by the Timestamp Interval.Tags, how To, windows 7, windows Server 2008.For Event ID under the Includes/Excludes Event IDs section enter 1074 for the Event.Again normally I love the shutdown tracker because it provides historical context to the reasons for shutting down a server. .NnIf you enable this setting and choose "Workstation Only" from the drop-down menu, the Shutdown Event Tracker is displayed when you shut down a Windows XP Professional workstation.