Security Event Log

From: Komfort IT (it_koe@hotmail.com)
Date: 07/31/02 

From: "Komfort IT" <it_koe@hotmail.com>
Date: Wed, 31 Jul 2002 18:46:44 +0100

Hello,

Would I be correct in assuming that for EVERY 540 event there should also be
a appropriate 538 event.

I am trying to match 540 events to 538 events by comparing the Username and
LogonID. Should there always be a matching pair?

Regards,

Gavin Faux
Systems Developer
Komfort Office Environments plc