I found event 1074 which immediately preceded event 6009. But the Task Scheduler shows that the task never ran. Why would the Task Sheduler behave that way?
The process winlogon.exe has initiated the restart of
computer CAEI-DEV on behalf of user
CAEI-DEV\priscilla.holmes for the following reason: No
title for this reason could be found
Reason Code: 0x840000ff
Shutdown Type: restart
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.