When a logon session is terminated, event 4634 is generated. This is not to be confused with event 4647, where a user initiates the logoff (i.e., a specific account uses the logoff function). Here, it is simply recorded that a session no longer exists as it was terminated.