If you receive:
Event ID: 6008
Source: Event Log
Description: The previous system shutdown at <time> on <date> was unexpected
and it is not true, upgrade to Service Pack 6 (SP6).
Use Regedt32 to navigate to:
On the Edit menu, Add Value name TimeStampInterval, a type REG_DWORD. In the
DWORD Editor, using the Decimal Radix, set it to the number of minutes between time stamp events.
setting it to 0 will cause only boot and normal shutdown events to be logged.