how to find who is shuting down my pc from shutdown -i command RRS feed

  • Question

  • Hi Experts 

    how to find out who shutdown my pc from shutdown -i command .my pc's are windows 7 ,8 , 10 .i checked the event log 1073 and 1074 .1073 shows me that i canceled the forced shutdown . and 1074 is not generated because i cancel the shutdown when it was forcing to shutdown . 

    can i find any logs in DC that  who is using shutdown -i command . 


    Tuesday, August 16, 2016 9:55 AM