Event ID 1002 — Windows Logon Availability

  • Article

Applies To: Windows Server 2008

Windows logon availability determines whether the Windows logon process is able to be completed successfully. The logon process is the interface between the account for a user, process, or service and the computer that establishes authenticated credentials for the account and allocates the appropriate system and network resources. Windows logon manages the use of the secure attention key (CTRL-ALT-DELETE) to initiate the login screen, load the user profile on logon, and lock the computer.

Event Details

Product: Windows Operating System
ID: 1002
Source: Microsoft-Windows-Winlogon
Version: 6.0
Symbolic Name: EVENT_SHELL_RESTARTED
Message: The shell stopped unexpectedly and %1 was restarted.

Resolve

This is a normal condition. No further action is required.

Windows Logon Availability

Core Security