Announcement

Collapse
No announcement yet.

Audit Logoff Events

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Audit Logoff Events

    Is there any way I can get all account log off events from Security log? I am using Windows 2008 R2 domain.

  • #2
    Re: Audit Logoff Events

    Hi,

    just filter the logs based on event id you will get the required info
    Thanks & Regards
    v-2nas

    MCTS 2008, MCTIP, MCSE 2003, MCSA+Messaging E2K3, MCP, E2K7
    Sr. Wintel Eng. (Investment Bank)
    Independent IT Consultant and Architect
    Blog: http://www.exchadtech.blogspot.com

    Show your appreciation for my help by giving reputation points

    Comment


    • #3
      Re: Audit Logoff Events

      What is the event ID for logoff? For login it's 4776

      Comment


      • #4
        Re: Audit Logoff Events

        Originally posted by avilt View Post
        What is the event ID for logoff? For login it's 4776
        4634 or 4647 depending on what events you are tracking. Google for more. There is a question mark about how reliable these are though.
        Caesar's cipher - 3

        ZKHQ BRX HYHQWXDOOB GHFLSKHU WKLV BRX ZLOO UHDOLVH LW ZDV D ZDVWH RI WLPH!

        SFX JNRS FC U6 MNGR

        Comment

        Working...
        X