Skip to main content

You are not logged in. Your edit will be placed in a queue until it is peer reviewed.

We welcome edits that make the post easier to understand and more valuable for readers. Because community members review edits, please try to make the post substantially better than how you found it, for example, by fixing grammar or adding additional resources and hyperlinks.

3
  • Just tried this on my Windows 10 Pro 21H2 which has 3 months of security event log and neither of these events is found. Does your answer only apply to Windows Server ?
    – grahamj42
    Commented Mar 26, 2022 at 6:24
  • 1
    My two-day old Win10 21H2 instance has 33 logout events, varied between the two codes (mostly 4634 due to UMFD-X accounts). You're either not logging, not filtering correctly, or not searching the right log. See i.imgur.com/Q7YdFTs.png for a screenshot. Ensure you're filtering the "Windows Logs > Security" log
    – Guy S
    Commented Mar 26, 2022 at 11:14
  • @grahamj42 no, my windows 10 laptop on a domain has plenty of events. Commented Mar 26, 2022 at 22:21