Skip to content

Event ID 274: Bootmgr Security Version Number check failed

Windows Event ID Lookup: What Windows event IDs mean: 4625, 4624, 4740, 6008, 41, 7045, 1102 and 3,000 more, with Windows' own message text, the fields and what to check.

Look up a Windows event ID from Event Viewer, a SIEM alert or a log export: what it means, the fields it records, and what to check. Many IDs are used by more than one source (event 41 is both a Kernel-Power crash and a boot error), so every definition is shown, the one people usually mean first. The message text is Windows' own, read from the event providers of Windows 10.0.26200.0, 2026-10-28; the notes are ours, based on Microsoft's security auditing reference.

Try: 4625, 4624, 4740, 6008, 41, 1074, 7045, 1102, 4104, 1149

Bootmgr Security Version Number check failed.

Event 274
Kernel-Boot
System log
Error
Message and fields (as Event Viewer shows them)
Bootmgr Security Version Number check failed. Svn Value: …, Previous SVN Value: ….

The time provider … has signaled a leap second should be … at … UTC (… local time).

Event 274
Time-Service
System log
Warning
Message and fields (as Event Viewer shows them)
The time provider … has signaled a leap second should be … at … UTC (… local time). However, there is no matching local system data. Please make sure you are synchronizing time from a time source that supports leap seconds and apply the latest Windows patches to avoid seeing this message.
System Tick Count: ….

For more information, see https://go.microsoft.com/fwlink/?linkid=845961.

Adapter directed power up notification received.

Event 274
StorPort
System log
Information
Message and fields (as Event Viewer shows them)
Adapter directed power up notification received.

Pending unloading driver database

Event 274
Kernel-PnP
System log
Information
Message and fields (as Event Viewer shows them)
Pending unloading driver database …

Reconnect connection ID … to session … took … (ms)

Event 274
TerminalServices-RemoteConnectionManager
TerminalServices-RemoteConnectionManager/Operational log
Information
Message and fields (as Event Viewer shows them)
Reconnect connection ID … to session … took … (ms)