winsysadminblog.com
Get the last Reboot or Shutdown reason and user from the Windows Event Log
Start by going into Event Viewer (Windows+R or the Start Menu and type eventvwr.msc). Navigate to the System Log under Windows, we then want to use Filter Current Log to allow us to only show Even…