Where does Windows 2000 store whether the last shutdown was a restart or shutdown (switch off)?

Question

Where does Windows 2000 store whether the last shutdown was a restart or shutdown (switch off)?

Is this in the registry or somewhere else?

Answer 1

After a bit of registry searching I came across the key that stores this info:

HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer

value Shutdown Setting

• 0x2 = Shut down
  Ends the session and shuts down Windows 2000 so that the power can be turned off safely.

• 0x4 = Restart
  Ends the session, shuts down Windows 2000, and starts Windows 2000 again.

This is documented fully on the Microsoft TechNet - Explorer Shutdown page.