Sometimes, when shutting down the machine, the system detects and records an incorrect user name. This results in logs showing a user who did not actually perform the shutdown operation. Please investigate the possible causes of this issue and suggest improvements to ensure accurate user identification during shutdown events.