Skip to main content
Windows security encyclopedia
#microsoft #windows #security
Search form
Search this site
You are here
Windows event ID encyclopedia
»
System
Security State Change
Policy path:
Computer Configuration\Windows Settings\Advanced Audit Policy Configuration\System
Related content
Navigation
Microsoft security bulletins
Windows event ID encyclopedia
Account Logon
Account Management
DS Access
Detailed Tracking
Logon/Logoff
Object Access
Policy Change
Privilege Use
System
IPsec Driver
Other System Events
Security State Change
Windows event ID 4608 - Windows is starting up
Windows event ID 4609 - Windows is shutting down
Windows event ID 4616 - The system time was changed
Windows event ID 4621 - Administrator recovered system from CrashOnAuditFail. Users who are not administrators will now be allowed to log on. Some auditable activity might not have been recorded
Security System Extension
System Integrity
Other
Windows group policy encyclopedia
Windows services encyclopedia
