OS Restart Audit ???

A few windows services that i started yesterday seem to have shut down today. My guess is that the machine was restarted. Is there a way i can verify from some log if the machine was restarted manuallly or automatically after say some patches were deployed?
LVL 21
Who is Participating?
MidnightOneConnect With a Mentor Commented:
Head into the System log of the server and look for event ID 6006, source EventLog. Work backwards from there to see why the shutdown occurred (if i was scheduled) and forward if it wasn't ( it'll leave evidence).

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.