Microsoft.Win32.SessionEndReasons
Defines identifiers that represent how the current logon session is ending.
Logoff = 1
The user is logging off and ending the current user session. The operating system continues to run.
SystemShutdown = 2
The operating system is shutting down.