WinSecWiki
Windows Security Settings
Articles
WinSecWiki
»
Windows Security Settings
»
Local Policies
»
Audit Policy
»
Audit logon events
»
Other Logon/Logoff Events
Other Logon/Logoff Events
Other Logon/Logoff Events
This category groups together logon related events associated with screen saver, console locking and Remote Desktop connections. To configure this category you must use
auditpol
.
Coverage on events generated by this category are currently in the
Security Log Encyclopedia
:
Event ID
Title
4778
A session was reconnected to a Window Station.
4779
A session was disconnected from a Window Station.
4800
The workstation was locked.
4801
The workstation was unlocked.
4802
The screen saver was invoked.
4803
The screen saver was dismissed.
Add Your Comments
Name:
*
Email Address:
Web Address:
Verification Code:
*
Details
Article not rated yet.
Article has been viewed 2,066 times.
Options
Bookmark Article
Social Bookmarks
Comments RSS
Upcoming Webinars
Web Protection: The Missing Link in the Endpoint Security Chain?
File Integrity Monitoring with the Windows Security Log
Anatomy of an Attack: What Happened at RSA and What Can We Learn From It?
Implementing Virtual Security Cameras to Protect Privileged Access and Enforce Accountability
Additional Resources
Security Log Quick Reference Chart
Security Log Resource Kit
Learn about the SharePoint Audit Log
Patch Tuesday Analysis
Home
>
Windows
>
WinSecWiki
User name:
Password:
/
Forgot?
Register
Home