User Activity

I have a user that has Canon LIDE220 on dell PC with win11...Randomly user is experiencing window with confirmation of shutting down windows (than he needs to click on no to continue work) , although user didnt clicked anything and is working on a pc...