Windows Client OS

Enable Shutdown Event Tracker in Windows XP

How can I enable the Shutdown Event Tracker on a Windows XP machine?

Shutdown Event Tracker provides a way for IT professionals to consistently track why users restart or shut down their computers. It does not document why users choose other options, such as Log off and Hibernate. It gathers the reasons users give for restarts and shutdowns to help create a comprehensive picture of an organization’s system environment. Shutdown Event Tracker is enabled by default and supported on all Windows Server 2003 family of operating systems. It is disabled by default and unsupported on Windows XP Professional.

Sponsored Content

Maximize Value from Microsoft Defender

In this ebook, you’ll learn why Red Canary’s platform and expertise bring you the highest possible value from your Microsoft Defender for Endpoint investment, deployment, or migration.

To control the use of the Shutdown Event Tracker, perform the following:

  1. Start regedit.exe.
  2. Go to
  1. Double-click ShutdownReasonUI, and set it to 1 to enable or 0 to disable.
  2. Click OK.
  3. Close regedit.

A reboot is NOT necessary for this change to take effect.

From now on, whenever you try to shutdown your computer you will receive the following dialog-box:

An easier way is:

  1. Open Group Policy, then load the group policy you want to apply the change to.

Note: On a computer that is not a part of a domain you can set this feature locally by running GPEDIT.MSC from the Run command (only on XP Pro).

  1. Expand Computer Configuration > Administrative Templates > System.
  2. Double-click Display Shutdown Event Tracker.
  3. Select Enabled.
  4. Select the Never or Always option (depending on your needs), then click OK.

  1. Click OK to close all dialog boxes.


Shutdown Event Tracker

System Shutdown Reason Codes

Related Topics:


Don't have a login but want to join the conversation? Sign up for a Petri Account

Comments (0)

Leave a Reply

External Sharing and Guest User Access in Microsoft 365 and Teams

This eBook will dive into policy considerations you need to make when creating and managing guest user access to your Teams network, as well as the different layers of guest access and the common challenges that accompany a more complicated Microsoft 365 infrastructure.

You will learn:

  • Who should be allowed to be invited as a guest?
  • What type of guests should be able to access files in SharePoint and OneDrive?
  • How should guests be offboarded?
  • How should you determine who has access to sensitive information in your environment?

Sponsored by: