Windows Security Log Event ID 4875

4875: Certificate Services received a request to shut down

On this page

• Description of this event
• Field level details
• Examples

Having tested for this event by shutting down Certificate Services I conclude this event does not seem to get logged at all despite MS documentation. 

However check out events 4880 and 4881 which log startup and shutdown of Certificate Services.

I haven't been able to produce this event. Have you? If so, please start a discussion (see above) and post a sample along with any comments you may have! Don't forget to sanitize any private information.

Free Security Log Resources by Randy

• Free Security Log Quick Reference Chart
• Windows Event Collection: Supercharger Free Edtion
• Free Active Directory Change Auditing Solution
• Free Course: Security Log Secrets

Supercharger Enterprise

 

 

Upcoming Webinars AI Usage by Employees: Understand the Risks and Mitigations Before Choosing What to Do About It Identifying the Tier 0 Assets in Your Active Directory Environment is Step #1 in ITDR

Additional Resources

•	Event IDs
•	All Event IDs
•	Audit Policy