Event ID: 4609

Windows is shutting down

Windows is shutting down.
All logon sessions will be terminated by this shutdown.



Lookup Audit Policy Configuration Settings

C:\> AuditPol.exe /get /subcategory:"Security State Change"
How to enable Windows Auditing



LEFT/RIGHT arrow keys for navigation

Back to List