Windows Security Log Event ID 1100

This post is regarding Windows Security Log Event ID 1100.

This is a normal event and this event logged at time of system shutdown.

Whenever a Windows Event Log service is shut down, event ID 1100 is logged. While this event is also triggered during a normal system shutdown, emergency system resets do not trigger event ID 1100.

Why does event ID 1100 need to be monitored?

• To track system shutdowns and restarts
• To monitor for malicious activity where a user tries to shut down the Log Service to hide their own identity.

So, that’s all in this blog. I will meet you soon with next stuff .Have a nice day !!!

Recommended contents

How to Check the Active Directory Database Integrity

Disabling and Enabling the Outbound Replication

DFS Replication Service Stopped Replication

What is Strict Replication Consistency

The replication operation failed because of a schema mismatch between the servers involved

Troubleshooting ad replication error 8418 the replication operation failed because of a schema mismatch between the servers

How to export replication information in txt file

Repadmin Replsummary

Enabling the outbound replication

Disabling and enabling replication on schema master domain controller

How to enable strict replication consistency

How to prevent lingering objects replication in active directory

AD replication process overview

How to force active directory replication

Change notification in replication process

How to check replication partner for a specific domain controller

dcdiag test replications

DFS Replication Event

Unidirectional replication

Guys please don’t forget to like and share the post. You can also share the feedback on below windows techno email id.

If you have any questions feel free to contact us on admin@windowstechno.com also follow us on facebook@windowstechno to get updates about new blog posts.