Why did windows reboot?
Review Event IDs 19, 41, 1001, 1074, and 7045 for the causes of reboot
Event IDs 19, 41, 1001, 1074, and 7045 might indicate reboot causes. Some reboots are caused by OS updates, bug checks, and user initiated shutdowns or restarts. Other reboots might be required during software installation or management client processes.
| Event ID | Source | Description |
|---|---|---|
| 19 | WindowsUpdateClient | Installation Successful: Windows successfully installed the following update: Security Update for Windows (<KB Number>) |
| 41 | Kernel-Power | The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. |
| 1001 | WER-SystemErrorReporting | The computer has rebooted from a bugcheck. The bugcheck was: 0xXXXXXXXX (0xX, 0xX, 0xX, 0xX). A dump was saved in: C:\Windows\MEMORY.DMP. Report ID: <GUID>. |
| 1074 | User32 | The process <Process Name> has initiated the restart of computer <Computer Name> on behalf of user <Domain User> for the following reason: <Reason> Reason Code: <Hex Code> Shutdown Type: <Type> Comment: |
| 7045 | Service Control Manager |
A service was installed in the system. |