Windows Event IDs

Event ID	Descriptions
1076	Hot shutdown server event ID for windows server 2008.
6013	System up time information
1074	The process winlogon.exe has initiated the restart of computer
1280	Nic Agents
6008	Unexpected Reboot
11728	Microsoft Operations Manager 2005 Agent -- Configuration completed successfully.
644	Account locked out. Event id
675	Bad password information
1119	Global Catalog Event Viewer may show event ID 1119 in the Directory Service log. The Description for this event ID states that the computer is now advertising itself as a global catalog server.
1419	Infrastructure Master Rule Event Id 1419 will be logged in event viewer when the two rules exist in the same domain controller
560, 4663	One of the file has deleted in your file server, you need to check which user has been deleted that file and which system. How do you check the event viewer? In windows 2003 Event id is = 560 In windows 2008 Event id is = 4663