Several users of a shared computer report that Windows often indicates an improper shutdown was experienced upon power on. Which of the following would be the BEST course of action to determine which user is responsible for causing the issue?
A. Review the System Log
B. Check msconfig utility
C. Checkboot. ini
D. Review the ntuser.dat file