Event ID: 528

Successful Logon

Successful Logon:
    User Name:              %1
    Domain:                 %2
    Logon ID:               %3
    Logon Type:             %4
    Logon Process:          %5
    Authentication Package: %6
    Workstation Name:       %7
    Logon GUID:             %8
    Caller User Name:       %9
    Caller Domain:          %10
    Caller Logon ID:        %11
    Caller Process ID:      %12
    Transited Services:     %13
    Source Network Address: %14
    Source Port:            %15
    Caller Process Name:    %16


Lookup Audit Policy Configuration Settings

C:\> AuditPol.exe /get /category:Logon/Logoff
How to enable Windows Auditing


Audit Category:
Logon/Logoff
Corresponding Events:
4624


LEFT/RIGHT arrow keys for navigation

Back to List