The Shutdown Event Tracker, a new Windows Server 2003/2008 feature, is an uncomplicated GUI application that allows administrators to monitor shutdown events on the server. The tool is enabled on Windows Server 2003/2008 by default. The Shutdown Event Tracker collects information on the reasons why the server was shut down, and then logs this information in Event Viewer. The command-line utility equivalent to the Shutdown Event Tracker is Shutdown.exe.
The Shutdown Event Tracker requires you to provide a reason whenever a server is shut down or restarted. When a server is expectedly shut down, a dialog box or page is displayed, requesting you to specify the reason for the server being shut down. When a server is unexpectedly shut down, the following user to log on to the server has to specify the reason for the server shutting down. Shutdown events can be viewed in Event Viewer, and can be useful when you need to improve uptime.
Configure the Shutdown Event Tracker
- Click Start, Run, and then enter gpedit.msc. Click OK.
- The Group Policy Object Editor console opens.
- In the left pane, expand Computer Configuration, and then Administrative Templates.
- Click System
- In the right pane, find and double-click the Display Shutdown Event Tracker.
- When the Display Shutdown Event Tracker Properties dialog box opens, select one of the following options: Not Configured, Enabled, Disabled
- If you select the Enabled option, you can choose between the following options to specify when the Shutdown Event Tracker should be displayed: Always: This option is self explanatory. Server Only: When selected, the Shutdown Event Tracker is displayed for only Windows Server 2003/2008 servers. Workstation Only: When selected, the Shutdown Event Tracker is displayed for only Windows XP Professional workstations.
- If you want to view help information on the Shutdown Event Tracker application, click the Explain tab.
- Click OK, and then close the Group Policy Object Editor console.