Windows 11/10 是微软(Microsoft)一系列操作系统的改进版本，拥有大量粉丝。它易于使用，提供更好的安全性，与大多数软件程序兼容，最重要的是跟踪系统的每个活动。许多用户报告了在没有任何警告或原因的情况下自动关闭 PC 的问题。使用Windows 10的系统跟踪功能，我们可以找出您的 PC 无缘无故关闭 Windows 11/10 的原因。
找出电脑关机的原因
意外关机可能会以多种方式发生，有时让您的 PC 长时间处于睡眠状态可能会导致随机关机。系统可能会或可能不会通知您有关关机的信息。在某些情况下，即使更新了所有驱动程序，用户也会收到关于在 10 分钟或 30 分钟内突然要求关机的消息。让我们找出Windows 10这种意外行为的根源。在本文中，您将学习三种方法来查找Windows 11/10意外关机的原因。
- 通过事件查看器
- 通过使用 PowerShell
- 使用命令提示符
现在让我们详细看看它们：
1]通过事件查看器
要使用事件查看器(Event Viewer)查找意外关闭的原因，请使用以下建议：
单击(Click)Start，键入Event Viewer，然后从列表顶部选择结果。
进入事件查看器(Event Viewer)后，从左侧展开Windows 日志(Windows Logs)，然后选择系统(System)。
现在右键单击系统(System)并选择过滤当前日志(Filter Current Log)选项。
在过滤当前日志(Filter Current Log)窗口中，选择过滤(Filter)选项卡。然后转到All Event ID文本框并输入以下 ID 号，以逗号分隔，如下面的快照所示。
- 41：这表示您的系统崩溃、断电或没有响应，这反过来又导致使用干净关机选项错误关机。
- 1074：记录此事件以进行手动关机或重新启动。它也适用于系统自动重新启动以将新更新安装到您的计算机时的事件。
- 6006：安装新更新后触发，尤其是关机过程中系统丢失时触发。
- 6005：这是系统重新启动时发生的错误。
- 6008：该事件明确表示随机自动关机，可能是41错误导致。
现在单击确定按钮，然后双击日志以验证信息。
完成上述步骤后，您将看到设备意外关闭的真正原因。
阅读(Read)：如何检查关机和启动日志(How to check the Shutdown and Startup Logs)。
2]通过使用PowerShell
另一种查找Windows 10意外关机原因的方法是使用Windows PowerShell。因此，如果您更喜欢命令行界面而不是GUI，则可以使用以下说明进行操作：
打开提升的 PowerShell 提示符(Open an elevated PowerShell prompt)
打开后，键入以下命令并按
进入：
Get-WinEvent -FilterHashtable @{ LogName = 'System'; Id = 41, 1074, 6006, 6605, 6008; } | Format-List Id, LevelDisplayName, TimeCreated, Message
进入日志描述部分，了解可能的原因和关机时间。
让我们详细谈谈它们。
首先(First)，打开提升的PowerShell提示符。为此，请右键单击开始(Start)并从菜单列表中选择Windows PowerShell (Admin)选项。(Windows PowerShell (Admin))
如果触发UAC提示并请求您的许可，请单击是(Yes )按钮。
在提升的PowerShell应用程序区域内，复制并粘贴以下命令，然后按 Enter(Enter)：
Get-WinEvent -FilterHashtable @{ LogName = 'System'; Id = 41, 1074, 6006, 6605, 6008; } | Format-List Id, LevelDisplayName, TimeCreated, Message
运行上述命令后，将列出可能的关机原因和时间。为此，您可以转到日志描述部分并检查它们。
相关(Related)：计算机意外关闭并自动重新启动(Computer shuts down unexpectedly and restarts automatically)。
3]使用命令提示符
要查找计算机意外关闭的真正原因和时间，请遵循以下建议：
(Run Command Prompt as administrator)在您的计算机上以管理员身份运行命令提示符。
键入以下命令并按Enter：
wevtutil qe System /q:"*[System[(EventID=41) or (EventID=1074) or (EventID=6006) or (EventID=6005) or (EventID=6008)]]" /c:100 /f:text /rd:true
现在按Enter键就完成了。您将看到导致计算机意外关闭的所有可能原因。
如果您需要，您可以详细阅读上述步骤表格。
因此，要查找计算机意外关闭的原因，您首先需要打开提升的命令提示符。
为此，请右键单击“开始(Start)”菜单并打开“运行”(Run)对话框。
在文本字段中，键入 cmd 以搜索Command Prompt。然后按Ctrl+Shift+Enter以管理员权限打开命令提示符。(Command Prompt)此外，如果屏幕上出现UAC提示，请单击是(Yes)按钮。
现在复制并粘贴以下命令行，然后按 Enter：
wevtutil qe System /q:"*[System[(EventID=41) or (EventID=1074) or (EventID=6006) or (EventID=6005) or (EventID=6008)]]" /c:100 /f:text /rd:true
如果您想查看更多或更少的事件日志，您可以通过在上述命令行中进行一些小的更改来实现。为此，请使用您的首选号码设置 /c:100 并再次运行该命令。
您将看到计算机上发生关机的可能原因和时间。您可以转到日志描述部分并检查它们。
希望能帮助到你。(Hope it helps.)
相关(Related)：使用任务计划程序安排关机或重启。(Schedule Shutdown or Restarts using the Task Scheduler.)
How to find the cause of an Unexpected Shutdown on Windows 11/10
Windows 11/10, an improved version of series of operating systems by Microsoft has a huge fan following. It is easy to use, provides better security, compatible with most of the software programs, and most importantly keeps a track of every activity of the ѕystem. Manу uѕers have reported a problеm of automatiс shutdown of your PC wіthout any warning or reason. Using the system tracking feature of Windows 10 we cаn fіnd oυt why your РC ѕhut down for no reason Windows 11/10.
Find out why computer shut down
The unexpected shut down may occur in many ways, sometimes putting your PC at sleep for a longer period may lead to random shut down. The system may or may not notify you about the shutdown. In some cases, users have received a message regarding the sudden requirement of shutdown in 10 minutes or 30 minutes even if all the drivers are updated. Let us find out the root of this unexpected behavior of Windows 10. In this article, you will learn three methods using which you can find the cause of unexpected shutdown on Windows 11/10.
- Through Event Viewer
- By using PowerShell
- Using Command Prompt
Let’s now see them in detail:
1] Through Event Viewer
To find the cause of the unexpected shutdown using Event Viewer, use the following suggestions:
Click on Start, type Event Viewer, and then select the result from the top of the list.
After heading into Event Viewer, expand Windows Logs from the left and then select System.
Now do right-click on System and select the Filter Current Log option.
Inside the Filter Current Log window, select the Filter tab. Then go to the All Event ID textbox and enter the following ID number separated by a comma as shown in the below snapshot.
- 41: It indicates that your system is crashed, power lost, or not responding which in turn leads to incorrect shutdown using the clean shutdown option.
- 1074: This event is logged for manual shutdown or restart. It is also applied for the event when the system automatically restarts to install new updates to your computer.
- 6006: It is triggered after the new update installation, especially when the system is lost during the shutdown.
- 6005: This is an error that occurs when the system goes for a reboot.
- 6008: This event is a clear indicator of random automatic shutdown, which may be caused due to error 41.
Now click the OK button and then double-click a log to verify the information.
As soon as you complete the above steps, you will see the real causes of your device shut down unexpectedly.
Read: How to check the Shutdown and Startup Logs.
2] By using PowerShell
Another method to find the cause of the unexpected shutdown on Windows 10 is using Windows PowerShell. So, if you prefer a command-line interface over GUI, you can use the following instructions to do so:
Open an elevated PowerShell prompt
Once it opens, type the following command and press
Enter:
Get-WinEvent -FilterHashtable @{ LogName = 'System'; Id = 41, 1074, 6006, 6605, 6008; } | Format-List Id, LevelDisplayName, TimeCreated, Message
Go to the log description section and know the possible causes and time for the shutdown.
Let us talk about them in detail.
First of all, open an elevated PowerShell prompt. To do so, right-click on Start and select Windows PowerShell (Admin) option from the menu list.
If a UAC prompt is triggered and asks for your permission, click on the Yes button.
Inside the elevated PowerShell app area, copy and paste the following command and hit Enter:
Get-WinEvent -FilterHashtable @{ LogName = 'System'; Id = 41, 1074, 6006, 6605, 6008; } | Format-List Id, LevelDisplayName, TimeCreated, Message
After running the above command, the possible causes and times for the shutdown will be listed. To do this, you can go to the log description section and check them.
Related: Computer shuts down unexpectedly and restarts automatically.
3] Use Command Prompt
To find the real cause and time of the unexpected shut down of your computer, follow the below suggestions:
Run Command Prompt as administrator on your computer.
Type the following command and hit Enter:
wevtutil qe System /q:"*[System[(EventID=41) or (EventID=1074) or (EventID=6006) or (EventID=6005) or (EventID=6008)]]" /c:100 /f:text /rd:true
Now press the Enter key and you’re done. You will see all the possible causes that had led your computer to shut down unexpectedly.
If you need, you can read the above steps in detail form.
So, to find the cause of the unexpected shutdown of your computer, you first need to open an elevated command prompt.
To do so, right-click on the Start menu and open the Run dialog.
In the text field, type cmd to search for Command Prompt. Then press Ctrl+Shift+Enter to open Command Prompt with admin privileges. Also, click the Yes button if a UAC prompts on the screen.
Now copy and paste the following command-line and press Enter:
wevtutil qe System /q:"*[System[(EventID=41) or (EventID=1074) or (EventID=6006) or (EventID=6005) or (EventID=6008)]]" /c:100 /f:text /rd:true
If you want to view more or fewer event logs, you can do it by doing some minor changes in the above command line. To do that, set /c:100 with your preferred number and run the command again.
You will see the possible causes and times for the shutdown that occurred on your computer. You can go to the log description section and check them.
Hope it helps.
Related: Schedule Shutdown or Restarts using the Task Scheduler.
