View Single Post
  #1 (permalink)  
Old 04-12-2008, 10:10 AM
Michael Walsh
Newsgroup Contributor
 
Posts: n/a
How to find user logon+logoff events in event log (after enabling audit)?

Yes, I enabled user auditing in SecPol.msc

Now after a few days of working (with a couple of logon+logoffs) I wanted to see in
the event log where the refering entries are.

Where are they?

I found only User="SYSTEM" logon entries in Security but no logoffs and no entries for other users.
In System log as well.

Can I audit logoffs at all?

Michael

Reply With Quote

 
Old 04-12-2008, 10:10 AM