Event Message:
Windows 2000 is starting up.
Source |
Event Log |
Event ID |
Event Type |
|---|---|---|---|
Security |
Security |
512 |
Success Audit |
Explanation:
This event record indicates that the system has been restarted. This has several implications: 1) All paired events (such as logon/logoff or open/close) from before the restart are terminated. 2) Some number of audit event records might have been lost. This is particularly true if a System Shutdown audit event record is not present in the log. This typically means that the system was powered off or stopped, rather than being shut down gracefully.