Eventviewer eventid for lock and unlock

后端 未结 9 919
滥情空心
滥情空心 2020-12-04 10:55

What is the event id in Event Viewer for lock, unlock for a computer in Windows XP, Windows 7, Windows Vista and Windows Server 2008?

9条回答
  •  挽巷
    挽巷 (楼主)
    2020-12-04 11:15

    To identify unlock screen I believe that you can use ID 4624. But then you also need to look at the Logon Type which in this case is 7: http://www.ultimatewindowssecurity.com/securitylog/encyclopedia/event.aspx?eventid=4624

    Event ID for Logoff is 4634

提交回复
热议问题