How to check windows shutdown restart time and date?

CodeB434

Extraordinary Member
I leave my Desktop on before leaving my room. Than I remotely login. However today I noticed the Desktop was restarted as I wasn't remoted on for 3 hours!! Is it someone entering my locked room to restart the PC?? Is it the electricity turning off ? Or is it some windows update doing all this?
Because I had several browsers tabs open in chrome before while I remoted on earlier in the day but not anymore.
Also kindly advise where can I check log files of windows 10 starting shutdown files if at all? Thanks
 

Neemobeer

Principal Cybersecurity Architect
Staff member
Yup, event viewer with log restart/shutdown events and who initiated them

Press [windows key + x]
Click Event Viewer
Select the  System log
In the right-hand pane select Filter current log

The event source you want is User32 and the event id is 1074
 
Top