Ok I found this in the event log (system)
A warning 'USER32'
The attempt to shut down 'computer name' failed
This was from the windows help and support page
Details
Product: Windows Operating System
Event ID: 1073
Source: USER32
Version: 5.2
Symbolic Name: WARNING_EW_SHUTDOWN_CANCELLED
Message: The attempt by user %2 to restart/shutdown computer %1 failed
Then it simply says
Explanation
This event is written when a user or application attempts, but fails, to restart or shut down the computer by using either the graphical user interface (GUI) or the shutdown command.
User Action
If you still want to restart or shut down the computer, save any open files, close any applications that are running, and then you can:
Use either the graphical user interface (GUI) or the shutdown command again.
Press CTRL+ALT+DELETE, and then while pressing CTRL, click Shut Down to force a shutdown.
Press the reset or power button on the computer.
any ideas?