InstantForum.NET v4.1.4UltimateWindowsSecurity.com Forumhttp://forum.ultimatewindowssecurity.com/noreply@ultimatewindowssecurity.comThu, 17 May 2012 08:54:20 GMT20http://forum.ultimatewindowssecurity.com/Topic258-32-1.aspxNothing different. Workstation unlocks are treated as logons. There's always a logoff for a logon. Ignore 538 logon type 7Sat, 07 Nov 2009 07:59:20 GMTRandyFranklinSmithhttp://forum.ultimatewindowssecurity.com/Topic258-32-1.aspxWhat does logon type 7 signify for event ID 538 as compared to logon type 7 for event ID 528?Fri, 06 Nov 2009 18:36:42 GMTmark sales