What is the Shutdown Event Tracker?

A. Windows XP introduces the Shutdown Event Tracker, which is an optional task that, when enabled, lets the user who stops and reboots a box enter an option for the stop (e.g., a hardware modification) and a comment (you have to enter a comment).

Click here to view image

Also, if the system stops for an unknown reason, the next time the computer starts, it prompts the Administrator to enter a comment for the cause of the unexpected shutdown. These events are then written to the system event log (event ID 1075), which you can use to better log the reasons behind system actions.

This component is included with XP Professional, Whistler Server, and Whistler Advanced Server, but—by default—it is disabled on XP Pro.