During a host-based investigation, an analyst reviews the Windows Security event log on a workstation and finds a series of Event ID 4634 entries associated with a specific user session, each preceded earlier by a matching logon. What does the presence of these Event ID 4634 entries indicate?