Solved

Unsafe Restart log

Posted on 2008-06-18
3
250 Views
Last Modified: 2010-03-05
I have a machine that is being powered down manually many times a day. Is there some type of log that XP Pro records the date and time of every unsafe shut down?

Thanks
0
Comment
Question by:lvollmer
  • 2
3 Comments
 
LVL 87

Accepted Solution

by:
rindi earned 250 total points
ID: 21815587
You probably won't see the time it is shutdown improperly, but you boot the system after that you should get a message in eventviewer telling you that the PC wasn't shutdown properly last time.
0
 
LVL 83

Assisted Solution

by:oBdA
oBdA earned 250 total points
ID: 21815638
An event id 6008 like this will be recorded:
Event ID: 6008
Source: Event Log
Type: Error
Description:
The previous system shutdown at <Time> on <Date> was unexpected.

The <time> in this event is not precise; this falls into a 1- or 2-minute period, IIRC.
0
 
LVL 83

Expert Comment

by:oBdA
ID: 21815739
I knew I've seen this someplace ...
Default for the heartbeat timestamp is 1 minute in W2k3 (and I guess it applies to XP, too, but can't verify it at the moment), and 5 minutes in W2k.
Shutdown Event Tracker Tools and Settings
http://technet2.microsoft.com/windowsserver/en/library/5c6e30b2-6803-418d-a7b5-e4eb79323db51033.mspx?mfr=true
0

Featured Post

Free Trending Threat Insights Every Day

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

Join & Write a Comment

Many times while working on a computer regardless of any Operating System, lag and crashes seem to creep in, hindering your working speed. Sometimes, it can also cause your work to be lost unexpectedly and as a result, you are unable to meet your de…
Citrix XenApp, Internet Explorer 11 set to Enterprise Mode and using central hosted sites.xml file.
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now