|Product:||Windows Operating System|
|Message:||The Event log service was stopped.|
This event is written during an expected restart or shutdown after the user initiates an expected restart or shutdown by clicking Start or pressing CTRL+ALT+DELETE, and then clicking Shut Down.
If the Persistent Time Stamp group policy setting is either enabled or not configured, system information is written to the data section of this event. This information includes the name and version of the Windows Server 2003 operating system and the computer’s make and model.
If any of the sources for this information are unavailable, or if their contents are unreadable, their corresponding fields display <unknown>.
No user action is required.