"lock computer" event id

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

using XP Pro SP2

when I lock the computer (Ctrl-Alt-Del Lock Computer) what event if any is
recorded in the event viewer?
 
I don't use the older style log on, so I can't be positive, but the new Welcome Screen causes an event 538 when the computer is "locked" using the Win key and L.
 
kevin said:
using XP Pro SP2

when I lock the computer (Ctrl-Alt-Del Lock Computer) what event if any is
recorded in the event viewer?
Click to expand...

Also, when you *unlock* a workstation, you'll see Event ID 528 "Successful
logon" with type 7


fyi...
Type 2: Interactive logon (someone at console)
Type 3: Network logon -
Type 4: Batch logon
Type 5: Service logon
Type 6: Proxy logon
Type 7: Unlock Workstation
 
Back
Top