Solved

Unsafe Restart log

Posted on 2008-06-18
3
255 Views
Last Modified: 2010-03-05
I have a machine that is being powered down manually many times a day. Is there some type of log that XP Pro records the date and time of every unsafe shut down?

Thanks
0
Comment
Question by:lvollmer
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 88

Accepted Solution

by:
rindi earned 250 total points
ID: 21815587
You probably won't see the time it is shutdown improperly, but you boot the system after that you should get a message in eventviewer telling you that the PC wasn't shutdown properly last time.
0
 
LVL 84

Assisted Solution

by:oBdA
oBdA earned 250 total points
ID: 21815638
An event id 6008 like this will be recorded:
Event ID: 6008
Source: Event Log
Type: Error
Description:
The previous system shutdown at <Time> on <Date> was unexpected.

The <time> in this event is not precise; this falls into a 1- or 2-minute period, IIRC.
0
 
LVL 84

Expert Comment

by:oBdA
ID: 21815739
I knew I've seen this someplace ...
Default for the heartbeat timestamp is 1 minute in W2k3 (and I guess it applies to XP, too, but can't verify it at the moment), and 5 minutes in W2k.
Shutdown Event Tracker Tools and Settings
http://technet2.microsoft.com/windowsserver/en/library/5c6e30b2-6803-418d-a7b5-e4eb79323db51033.mspx?mfr=true
0

Featured Post

Enroll in May's Course of the Month

May’s Course of the Month is now available! Experts Exchange’s Premium Members and Team Accounts have access to a complimentary course each month as part of their membership—an extra way to increase training and boost professional development.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Have you ever had a hard drive that you can't boot into, but need to change the registry? Here is the solution! This article guides you through accessing and editing a registry of a non-primary drive. To read registry information on a non-prim…
When you upgrade from Windows 8 to 8.1 or to Windows 10 or if you are like me you are on the Insider Program you may find yourself with many 450MB recovery partitions.  With a traditional disk that may not be a problem but with relatively smaller SS…
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

752 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question