Windows Security Log Event ID 4608

Operating Systems Windows 2008 R2 and 7
Windows 2012 R2 and 8.1
Windows 2016 and 10
Windows Server 2019 and 2022
 • Subcategory
 • Security State Change
Type Success
Corresponding events
in Windows 2003
and before

4608: Windows is starting up

On this page

4608 is an important security event: Any operating system is essentially defenseless when the operating system is down.

Free Security Log Resources by Randy

Supercharger Free Edition

Supercharger's built-in Xpath filters leave the noise behind.



Examples of 4608

Windows is starting up.

This event is logged when LSASS.EXE starts and the auditing subsystem is initialized.

Top 10 Windows Security Events to Monitor

Free Tool for Windows Event Collection


Additional Resources