On what basis a reboot initiated through InitiateSystemShutdownEx gets marked as Unexpected in a Windows server machine?

[GeorgeYQ]

A shutdown initiated through our internal tool was getting marked as "Unexpected Reboot" in the Windows Event Viewer.We are usingInitiateSystemShutdownW from our tool to initiate Shutdown in the with the following arguments:lpMachineName - NULLlpMessage - Shutdown message for Event ViewerdwTimeout - 0bForceAppsClosed - truebRebootAfterShutdown - Shutdown or Reboot based on the operationWe would like to know the behavior of the API used and also whether the Shutdowns initiated through it will be marked as "Unexpected" or not? If so, We need to know at what cases the shutdown will be marked as "

Continue reading...