Assuming SQL Server isn't running... Check the Windows Event Log (Application log). EventID 17148 shows shutdowns initiated by the Service Control Manager. I don't know what other options there are - I haven't looked. Yet. You could also check the most recent timestamp / modified date of the SQL Server Logs (no, not the database logs, but the log files that SQL Server writes out).