Is User's Id Who Shuts Down 2000 Server Logged

[Echoboy]

I am try to findoutif in the event log of a w2k server.
U can see who initiated the shutdown of a server.
U can see logoff an login, but I cannot find any
shutdown by xxx user id event's.
I have searched the net but cannot find anything.
I would assume it's an audit function as it would be
quite usefull to see who shut's down a server.
Any pointer's would be appreciated.

Thanks

Stu