I want to look up what user rebooted a server, and what message was left as to why. We have a server that has rebooted two weekends in a row, and i just need to track down why. I have access to the logs, i just want to be sure what i'm looking for. I can track back to the last time it was rebooted without issue, i just want to be sure i'm looking at the right logs.
MS Win 2008 std sp2, 64 bit.