how can i find why server was restarted

Khyati Bhardwaj 6 Reputation points
2022-05-04T19:38:38.873+00:00

The process C:\Windows\System32\svchost.exe (ENTWEMS14B) has initiated the restart of computer ENTWEMS14B on behalf of user NT AUTHORITY\SYSTEM for the following reason: Operating System: Service pack (Planned) Reason Code: 0x80020010 Shutdown Type: restart. how do we identify what caused the reboot exactly

Windows for business | Windows Server | User experience | Other
0 comments No comments
{count} votes

3 answers

Sort by: Most helpful
  1. Docs 16,071 Reputation points
    2022-05-09T03:01:21.243+00:00

    To view the common causes of restarts and shutdowns:

    Open event viewer > filter for these event numbers:

    41
    1074
    6006
    6008

    .
    .
    .
    .
    .

    Please remember to vote and to mark the replies as answers if they help.

    On the bottom of each post there is:

    Propose as answer = answered the question

    On the left side of each post there is /\ with a number: click = a helpful post
    .
    .
    .
    .
    .

    1 person found this answer helpful.
    0 comments No comments

  2. Anonymous
    2022-05-04T19:43:01.347+00:00

    Check the \winowsupdate.log Most likely was an update.

    --please don't forget to upvote and Accept as answer if the reply is helpful--


  3. Limitless Technology 39,931 Reputation points
    2022-05-10T07:37:37.13+00:00

    Hello

    Thank you for your question and reaching out.
    I can understand you are having some issues \ queries related to Server rebooted.

    You can check Windows update history by which you will be able to find if it was caused by Windows updates or Usually it can happened t when a remote shutdown command has been sent to a computer.

    Either from SCCM, WSUS, disgruntled co-worker, etc


    --If the reply is helpful, please Upvote and Accept as answer--

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.