I looked in /etc/cron.hourly(weekly,monthly) and only show files in cron.daily. I checked crontab -l and saw no crontab for root
I looked in /etc/crontab, /etc/cron.d, /usr/lib/cron/run-crons, /etc/init.d/cron, and /var/spool/cron/username but could find no references to issue a halt or init 0 every three weeks on a Friday.
What is the best way to check for any cron ,batch, or at files for all users which may shed light on this init 0 issue.? Can I disable /etc/init.d/rc0.d/S20halt to prevent any more init 0 commands until I can resolve this issue? This server is seldom shutdown and S20 could be enabled if init 0 is required.