The following Event ID’s in the System log are nice to know for various debugging scenarios on the client computers.
1074 – Information about program or user that initiated restart/shutdown
6005 – Startup time
6006 – Shutdown time
6013 – System uptime
Using the “Filter Current Log” feature allows you to search for occurences of the events you want to dig into.