Timeline for How can I determine whether a Windows logoff was manual or automated?
Current License: CC BY-SA 4.0
9 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Apr 14, 2022 at 22:00 | audit | First answers | |||
| Apr 14, 2022 at 22:01 | |||||
| Apr 8, 2022 at 12:47 | audit | First answers | |||
| Apr 9, 2022 at 1:09 | |||||
| Mar 27, 2022 at 19:53 | audit | First answers | |||
| Mar 27, 2022 at 19:53 | |||||
| Mar 26, 2022 at 22:21 | comment | added | spikey_richie | @grahamj42 no, my windows 10 laptop on a domain has plenty of events. | |
| Mar 26, 2022 at 11:14 | comment | added | Guy S | My two-day old Win10 21H2 instance has 33 logout events, varied between the two codes (mostly 4634 due to UMFD-X accounts). You're either not logging, not filtering correctly, or not searching the right log. See i.imgur.com/Q7YdFTs.png for a screenshot. Ensure you're filtering the "Windows Logs > Security" log | |
| Mar 26, 2022 at 6:24 | comment | added | grahamj42 | Just tried this on my Windows 10 Pro 21H2 which has 3 months of security event log and neither of these events is found. Does your answer only apply to Windows Server ? | |
| Mar 25, 2022 at 19:17 | vote | accept | George 2.0 Hope | ||
| Mar 25, 2022 at 16:09 | history | edited | spikey_richie | CC BY-SA 4.0 |
added 17 characters in body
|
| Mar 25, 2022 at 15:47 | history | answered | spikey_richie | CC BY-SA 4.0 |
