Event ID:
4621
Category:
System
Subcategory:
Security State Change
Supported on:
Windows Vista, Windows Server 2008
Administrator recovered system from CrashOnAuditFail. Users who are not administrators will now be allowed to log on. Some auditable activity might not have been recorded.
Value of CrashOnAuditFail: %1
This event is logged after a system reboots following CrashOnAuditFail.