|Product:||Windows Operating System|
|Message:||The process %1 has initiated the %5 of computer %2 on behalf of user %7 for the following reason: %3
Reason Code: %4
Shutdown Type: %5
This event is written when an application causes the system to restart, or when the user initiates a restart or shutdown by clicking Start or pressing CTRL+ALT+DELETE, and then clicking Shut Down. This event is written to the system log only when the Shutdown Event Tracker group policy setting is enabled or not configured on a computer running a Windows Server 2003 operating system.
A system state data file is written during every unplanned restart or shutdown. This file contains information about programs that were running just before the shutdown and information about the system and hardware. It might be useful to IT professionals in determining the cause for frequent, unplanned shutdowns.
To enable this feature on a computer running a Windows Server 2003 operating system, you can leave the System State Data group policy setting not configured, or you can enable it. This feature is not included in Windows XP Professional.
If you have the appropriate group memberships or privileges, you can enable Corporate Error Reporting by setting a path for uploading data to a central location on your network. You can also customize the error reporting dialogs. To learn more about Corporate Error Reporting, see Help and Support.
No user action is required.