Event ID: 540

Successful Network Logon

Successful Network Logon:
    User Name:               %1
    Domain:                  %2
    Logon ID:                %3
    Logon Type:              %4
    Logon Process:           %5
    Authentication Package:  %6
    Workstation Name:        %7
    Logon GUID:              %8
    Caller User Name:        %9
    Caller Domain:           %10
    Caller Logon ID:         %11
    Caller Process ID:       %12
    Transited Services:      %13
    Source Network Address:  %14
    Source Port:             %15
    Caller Process Name:     %16

Lookup Audit Policy Configuration Settings

C:\> AuditPol.exe /get /category:Logon/Logoff
How to enable Windows Auditing

Audit Category:

LEFT/RIGHT arrow keys for navigation

Back to List