Event ID 512 - Windows NT is starting up.
|Description||Windows NT is starting up.This event is logged when LSASS.EXE starts and the auditing subsystem is initialized.|
- ADAudit Plus consolidates a neat report, each time a machine has started.
- The report contains details about which machine was started and when it was started, along with the operating system information.
Event 512 applies to the following operating systems:
- Windows server 2000
- Windows server 2003 and XP
Corresponding event in Windows 2008 and Vista - Event 4608