Get the last Reboot or Shutdown reason and user from the Windows Event Log
Start by going into Event Viewer (Windows+R or the Start Menu and type eventvwr.msc). Navigate to the System Log under Windows, we then want to use Filter Current Log to allow us to only show Events with certain attributes (such as Source or IDs). In our case, we want to filter on Event Source: USER32. … Continue reading "Get the last Reboot or Shutdown reason and user from the Windows Event Log"