| Details | |
| Product: | Windows Operating System |
| Event ID: | 6009 |
| Source: | EventLog |
| Version: | 5.2 |
| Symbolic Name: | EVENT_EventLogProductInfo |
| Message: | Microsoft (R) Windows (R) %1 %2 %3 %4. |
| Explanation | |
|
The user restarted or shut down the computer by clicking Start or pressing CTRL+ALT+DELETE, and then clicking Shut Down. The message displays the Windows product information for the computer logging the message, including the product name, version, build number, service pack number, and operating system type. |
|
| User Action | |
|
No user action is required. |
|