how can i know which user turned off the server
its a windows server 2003.
i would like to know if there is a way to know how turned the server off .
there are some mondays that i see the server off and i think its someone who its turning it off.
i just enabled the remove and prevent access to shutdown command on the Group Policy.