Event ID 6009: is this event triggered only when a user-initiated shutdown has occurred?

view full story

http://serverfault.com – Like the title says. From what I've briefly read, 6009 occurs when CTRL-ALT-DEL or Start > Shutdown is initiated by a user. If a shutdown sequence is initiated by SYSTEM for example, would this event also be logged? (HowTos)