Re: "lock computer" event id

From: Colin Nash [MVP] (x_at_x)
Date: 09/10/05 

Date: Fri, 9 Sep 2005 22:54:05 -0400

"kevin" <kevin@discussions.microsoft.com> wrote in message
news:8BACFE55-EB99-43FF-8E59-AF3A54F1C675@microsoft.com...
> using XP Pro SP2
>
> when I lock the computer (Ctrl-Alt-Del Lock Computer) what event if any is
> recorded in the event viewer?

Also, when you *unlock* a workstation, you'll see Event ID 528 "Successful
logon" with type 7

fyi...
Type 2: Interactive logon (someone at console)
Type 3: Network logon -
Type 4: Batch logon
Type 5: Service logon
Type 6: Proxy logon
Type 7: Unlock Workstation 

-- 
Colin Nash
Microsoft MVP
Windows Shell/User

Relevant Pages

  • Re: Remote Server auto login
    ... The rule of thumb is that auto logon is a very bad idea. ... console; and monitor the system for anything suspicious. ... Host your server at a data center with good ... Second, use a limited account. ...
    (microsoft.public.security)
  • Re: Allowing non administrative console logon
    ... Go into your Terminal Server Configuration Console ... 2.Click on connection and then in the right hand pane, ... By adding the user to the "allow logon through terminal services" funny ...
    (microsoft.public.windows.terminal_services)
  • Re: Console Logon timeout?
    ... We are considering moving the oposite way: eliminate console logon. ... For IBM-MAIN subscribe / signoff / archive access instructions, ... send email to listserv@xxxxxxxxxxx with the message: GET IBM-MAIN INFO ...
    (bit.listserv.ibm-main)
  • Re: "domain does not exist" via RDP
    ... Can you provide additional details as to how widespread and check the Event ... But I could log on via the KVM console. ... I haven't touched DNS. ... logon via Remote Desktop gave the "domain does not exist" error after the ...
    (microsoft.public.windows.server.active_directory)
  • Console Logon Issues with WSS 2003 R2
    ... After a while I will be unable to logon remotely -- the ... logging on at the physical console and logging off the session there. ... Consider using a shadow copy storage volume that does not have ...
    (microsoft.public.windows.server.general)
Quantcast