Event Id512
SourceSecurity
DescriptionWindows NT is starting up.
Event InformationAccording to Microsoft :
Cause :
The Local Security Authority logs this event when the auditing system is initialized. This event corresponds to a Security 513 event. This event is logged for informational purposes only.
Resolution :
No user action is required.

-------------------------------------------------------------------------------------------

Cause:
This event record indicates that the system has been restarted. This typically means that the system was powered off or stopped, rather than being shut down gracefully.
Reference LinksEvent ID 512 from Source Security

The User Logoff Event ID 538 Is Not Logged to the Security Event Log When You Shut Down Your Computer and Then Restart It

Alternate Event ID in Vista and Windows Server 2008 is 4608.


  Did this information help you to resolve the problem?
  Yes: My problem was resolved.
  No: The information was not helpful / Partially helpful.
  Comments:

Captcha  Refresh