The Display Shutdown Event Tracker machine setting should be configured correctly. The Shutdown Event Tracker can be displayed when you shut down a workstation or server. This is an extra set of questions that is displayed when you invoke a shutdown to collect information related to why you are shutting down the computer. If you enable this setting and choose "Always" from the drop-down menu, the Shutdown Event Tracker is displayed when you shut down. If you enable this setting and choose "Server Only" from the drop-down menu, the Shutdown Event Tracker is displayed when you shut down a Windows Server computer beginning with Windows Server 2003. If you enable this setting and choose "Workstation Only" from the drop-down menu, the Shutdown Event Tracker is displayed when you shut down a Windows workstation beginning with Windows XP Professional. If you disable this setting, the Shutdown Event Tracker is not displayed when you shut down. If you do not configure this setting, the default behavior for the Shutdown Event Tracker occurs. Fix: (1) GPO: Computer Configuration\Administrative Templates\System\Display Shutdown Event Tracker (2) KEY: HKLM\Software\Policies\Microsoft\Windows NT\Reliability\ShutdownReasonOn