Is it possible on Windows Server 2000/2003/2008 machines to see which user rebooted the server?
I have found the shutdown event in the System event log, but it does not show which user initiated the reboot.
This was tested on Windows Server 2008.
There should be a log at:
(which should be