Event ID:
4609
Category:
System
Subcategory:
Security State Change
Supported on:
Windows Vista, Windows Server 2008
Windows is shutting down.
All logon sessions will be terminated by this shutdown.
Windows security encyclopedia
#microsoft #windows #security