How to Find Out Who Restarted Your Windows Server
A few weeks ago, one of our Windows Server made a reboot in the middle of the day. That was not planned, so we wanted to know what happened. Windows logs events like the reboot in the event log. The challenge is to find the right message in the huge pile of unrelated log messages. As it turns out, we can use a filter and get the right message in no time.


