Event ID - 4906

Event Id4906
SourceMicrosoft-Windows-Security-Auditing
DescriptionThe CrashOnAuditFail value has changed.
New Value of CrashOnAuditFail: 1
Event InformationCause :
This event is logged when you change the value of the security option "Audit: Shut down system immediately if unable to log security audits" which can be used to make the system crash with blue screen if the security log fills and configured to not overwrite or autobackup.
Reference Links

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.