Yes it could. Check the System Event Log for event 6005 and 6006 "The event log service was started/stopped" This indicactes a shutdown and startup. Tim Rushforth City of Winnipeg