Event ID 528
Successful LogonSuccessful Logon:
User Name: %1
Domain: %2
Logon ID: %3
Logon Type: %4
Logon Process: %5
Authentication Package: %6
Workstation Name: %7
Logon GUID: %8
Caller User Name: %9
Caller Domain: %10
Caller Logon ID: %11
Caller Process ID: %12
Transited Services: %13
Source Network Address: %14
Source Port: %15
Caller Process Name: %16Lookup Audit Policy Configuration Settings
C:\> AuditPol.exe /get /category:Logon/Logoff
Audit Category:
Logon/LogoffLEFT/RIGHT arrow keys for navigation
Back to List