logger

A logfile is kept for reference as to who did what and the system responses. Shown here is a user of level 4 that has tried to alter something in the Windows Control Panel, but as they are not permitted to the action that the request the action is terminated and logged. Note the user was denied access to the operation. (the name of this user is off the screen but in the real log file you would simply scroll up to see who was logged on!)

The user then shut down the machine.

2 minutes later the machine was booted by the user "system" (these names can be whatever the administrator wishes)