Event ID 528
Successful LogonSuccessful Logon: User Name: %1 Domain: %2 Logon ID: %3 Logon Type: %4 Logon Process: %5 Authentication Package: %6 Workstation Name: %7 Logon GUID: %8 Caller User Name: %9 Caller Domain: %10 Caller Logon ID: %11 Caller Process ID: %12 Transited Services: %13 Source Network Address: %14 Source Port: %15 Caller Process Name: %16
Lookup Audit Policy Configuration Settings
C:\> AuditPol.exe /get /category:Logon/Logoff
Audit Category:
Logon/LogoffLEFT/RIGHT arrow keys for navigation
Back to List