Would be nice if the remote commands you can send to machines came with a mandatory comment - which would then be passed on to the windows event responsible. That would help us figure out why reboots etc were issued.
An example from the event viewer (no comment was defined for this):
The process C:\Windows\system32\shutdown.exe (LAPRO3067) has initiated the restart of computer LAPRO3067 on behalf of user SCANLINEVFXLA\laszlo.sebo for the following reason: No title for this reason could be found
Reason Code: 0x800000ff
Shutdown Type: restart
Comment: