Someone initiated the accidental shutdown on my server. However, the start->shutdown is disabled in GPO on all my servers. The only way to initiate is from the command line shutdown /r /t:000
Another way someone could accidentally clicked on one of these windows update popups. But why in the event log it says >> for the following reason: Operating System: Recovery (Planned)
Any idea here?
The process wuauclt.exe has initiated the restart of computer SERVERNAME on behalf of user DOMAINNAME\username for the following reason: Operating System: Recovery (Planned)
Reason Code: 0x80020002
Shutdown Type: restart