The other day while working at a client’s office I had to deploy an application update using a Thin Client management console. I pushed the update to all Thin Clients. Shutdown Log Windows 10
This was supposed to be a non-intrusive deployment of the application – meaning the Thin Clients were not supposed to reboot. One Thin Client rebooted and I needed to find out why.
In Windows 10 there are three events that gives you information about reboots and shutdown:
Event ID 1074 – Indicates that the shut down process was initiated by an app. For example, it can be Windows Update.
Event ID 6006 – The clean shut down event. This means Windows 10 was turned off correctly.
Event ID 6008 – Indicates a dirty/improper shutdown. Appears in the log when the previous shutdown was unexpected, e.g. due to power loss or etc.
To find these events simply do:
- Press Windows key + R one the keyboard to open the Run dialog and then type eventvwr.msc followed by enter.
- In Event Viewer, select Windows Logs and then System on the left.
- On the right, click on the link Filter Current Log.
- In the next dialog, type the line 1074, 6006, 6008 into the text box under Includes/Excludes Event IDs.
- Click OK to filter the event log.
Now, the Event Viewer will display only events related to shut down and you can investigate reasons why. Hope this Find Shutdown Log Windows 10 brief tutorial helps.
Now, go see my sister website NYC Moments to see inspirational pictures of New York City.