After reboot from a manual shutdown (START->Shutdown) the Windows System Eventlog shows two events 1074. The first entry contains the correct reason code provided by the user, the second looks similar to this:
Event 0x000500FF (System Failure) is written to the SEL (System Event Log) even if a different shutdown reason was provided by the user who initiated the shutdown.
Microsoft will address the problem in future releases.
Use shutdown.exe to initiate the shutdown. E.g. from the elevated command line run:
shutdown.exe /r /d P:4:2
This will result in an eventlog and SEL entry with reason code 0x80040002.
Shutdown reason codes can be found here: http://msdn.microsoft.com/en-us/library/aa376885(VS.85).aspx
Article ID: 2001061 - Last Review: 08/27/2010 10:27:00 - Revision: 11.0