Windows Security Log Event ID 4875
| Operating Systems |
Windows 2008 R2 and 7
Windows 2012 R2 and 8.1
Windows 2016 and 10
Windows Server 2019 and 2022
|
Category
• Subcategory | Object Access
• Certification Services |
|
Type
|
Success
|
Corresponding events
in Windows
2003
and before |
|
4875: Certificate Services received a request to shut down
On this page
Having tested for this event by shutting down Certificate Services I conclude this event does not seem to get logged at all despite MS documentation.
However check out events 4880 and 4881 which log startup and shutdown of Certificate Services.
I haven't been able to produce this event. Have you? If so, please start a discussion (see above) and post a sample along with any comments you may have! Don't forget to sanitize any private information.
Free Security Log Resources by Randy
Setup PowerShell Audit Log Forwarding in 4 Minutes