How can I log processes/sevices that are causing slow shutdown?

Try this TenForums tutorial, please: Read Shutdown Logs in Event Viewer. It may tell/show you just what you need. If not, post again to this thread and we can take things further.
HTH and best wishes,
--Ed--

You're welcome. Hope it helps you get things sorted out.
Best wishes,
--Ed--

Sam Vimes said:

Hi Ed.....

I took a look at the event viewer as suggested and all it showed was that the event log was stopped and that I'd started a shutdown.

Any other suggestions would be welcome.

Thanks

Hi Sam.

You can turn on Verbosestatus in Registry editor. It will show what's system doing while shutting down or starting up:

I found instructions here : makeuseof.com | windows-taking-forever-shut-try/

You can change this by opening the Registry Editor (do a Windows search for “regedit”), then navigate to the following directory:

Code:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System

Now, in the right-side pane of the window, you may see an entry called VerboseStatus. If you see it, right-click it and then click Modify, and change its value to 1. If you do not see it, right-click an empty portion of the pane, go to New, and then DWORD (32-bit) Value. Create an entry called VerboseStatus and then set its status to 1.

Sam Vimes said:

Thanks Andre.....

I'm going off line for a few days but I'll try that when I get back.

Hope it'll help. Don't forget to turn it off afterwards. I found out it add few seconds to shutdown boot time.

Yes, it will slow things down slightly. It will also record large log files. That's fine while you're troubleshooting. But as Andre said, you'll want to turn it off when you're finished with it, to keep the no-longer-necessary consumption of system resources to a minimum.
HTH,
--Ed--