how can i find why server was restarted

Khyati Bhardwaj 1 Reputation point
2022-05-04T19:38:38.873+00:00

The process C:\Windows\System32\svchost.exe (ENTWEMS14B) has initiated the restart of computer ENTWEMS14B on behalf of user NT AUTHORITY\SYSTEM for the following reason: Operating System: Service pack (Planned) Reason Code: 0x80020010 Shutdown Type: restart. how do we identify what caused the reboot exactly

Windows Server 2016
Windows Server 2016
A Microsoft server operating system that supports enterprise-level management updated to data storage.
2,379 questions
0 comments

3 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Dave Patrick 426.1K Reputation points MVP
    2022-05-04T19:43:01.347+00:00

    Check the \winowsupdate.log Most likely was an update.

    --please don't forget to upvote and Accept as answer if the reply is helpful--

  2. Docs 15,146 Reputation points
    2022-05-09T03:01:21.243+00:00

    To view the common causes of restarts and shutdowns:

    Open event viewer > filter for these event numbers:

    41
    1074
    6006
    6008

    .
    .
    .
    .
    .

    Please remember to vote and to mark the replies as answers if they help.

    On the bottom of each post there is:

    Propose as answer = answered the question

    On the left side of each post there is /\ with a number: click = a helpful post
    .
    .
    .
    .
    .

    0 comments
  3. Limitless Technology 39,371 Reputation points
    2022-05-10T07:37:37.13+00:00

    Hello

    Thank you for your question and reaching out.
    I can understand you are having some issues \ queries related to Server rebooted.

    You can check Windows update history by which you will be able to find if it was caused by Windows updates or Usually it can happened t when a remote shutdown command has been sent to a computer.

    Either from SCCM, WSUS, disgruntled co-worker, etc

    --If the reply is helpful, please Upvote and Accept as answer--

    0 comments