Which of the following would be the BEST course of action to determine which user is responsible for causing the issue?

Several users of a shared computer report that Windows often indicates an improper shutdown was experienced upon power on. Which of the following would be the BEST course of action to determine which user is responsible for causing the issue?
A. Review the System Log
B. Check msconfig utility
C. Checkboot. ini
D. Review the ntuser.dat file

CompTIA A+ 220-1102 (Core 1) Exam FULL Printable PDF and Software. VALID exam to help you PASS.