How to see what's going on during Windows shutdown/logging off process?



As an IT administrator, it can be difficult to determine what is going on during the Windows shutdown/logging off process. Knowing what is going on during this process can be important in order to troubleshoot any issues that may arise. This article will explain how to view and interpret the Windows system events that occur during the shutdown/logging off process.

The first step in viewing the Windows system events during the shutdown/logging off process is to open the Event Viewer by searching for it in the Start menu. Once the Event Viewer is open, navigate to Windows Logs > System in the left-hand pane. Here, you will find a list of system events that have occurred. To view events related to the shutdown/logging off process, you should look for events with the ID 6006. This is the event that is triggered when the operating system shuts down.

The Event Viewer also provides a description of the event and any additional information that is available. This can be helpful in determining the cause of the shutdown/logging off process. For example, the event may indicate whether the process was caused by a user manually logging off or by the system shutting down for an update.

In addition to the Event Viewer, you can use the Command Prompt to view the Windows system events during the shutdown/logging off process. To do this, open the Command Prompt and type in the command “shutdown -v”. This will list the events that occurred during the shutdown/logging off process. Each event will have an ID and a description, which can help you determine the cause of the shutdown/logging off process.

Finally, you can use the Windows Process Monitor to view the Windows system events during the shutdown/logging off process. To do this, download and install the Process Monitor on your computer. Then, open the Process Monitor and select “Shutdown” from the list of processes. This will filter the events to only those related to the shutdown/logging off process. You can then view the events and their descriptions to determine the cause of the shutdown/logging off process.

In conclusion, understanding what is going on during the Windows shutdown/logging off process can be important for IT administrators. To view the Windows system events that occur during the process, you can use the Event Viewer, the Command Prompt, or the Windows Process Monitor. Each of these tools provides a different way to view the events and their descriptions, which can help you determine the cause of the shutdown/logging off process.

Inquire Now

Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Find your next full or part-time role here

ScaleDesk can either help you find your next full time gig or a part time side gig where you can create extra income!

Onboard with us once
Skip HR screening and go to the final interview with with only your resume and a video interview you never have to redo
Get paid electronically every month for the hours you work
We will be your reference even if you work for us once

IT Teams: Use ScaleDesk to augment your team

Schedule Demo