The Shutdown Event Tracker is utilized to track reasons for system shutdowns and reboots. It logs this information so you can examine system shutdowns.

When shutting down 2003 Server you will be prompted to enter a reason for shutdown and are presented choices to select from to best describe reason. These choices are as follows:

Disabling Shutdown Event Tracker

if you do not want to track shutdown events or just do not like to enter anything in dialog box each time you shutdown you can stop this feature. For this you want to use Group Policy Object Editor. Go to Start and then run and in the box type in gpedit.msc and press Ok.

Go to Computer Configuration, Administrative Templates, and System and choose Display Shutdown Event Tracker.

Double tick on Display Shutdown Event Tracker and choose disabled and click on Ok. Now you won’t see this screen when you go to shut down 2003 Server.

Viewing Shutdown Event Tracker event logs

to look out to the shutdown events go to Start, Programs, and Administrative Tools and choose Event Viewer. Then tick on System Log. Shutdown Event Tracker logs will have event IDs of 1076 or 1074. You can sort by event ID to create them simple to get. From there you can double tick an event to get details about shutdown.