Forum

Ultimate Windows Security Forum » Security Log » 4801 - The workstation was unlocked » How do you identify this at the Domain...

How do you identify this at the Domain... Expand / Collapse
Rate Topic
Display Mode
Topic Options
Author
Message
ranch
Posted 4/7/2016 11:01:44 AM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: Forum Members
Last Login: 7/8/2011 1:15:53 PM
Posts: 1, Visits: 0
Is this something I need to enable in Group Policy for the DC's, or what am I missing?
Post #5191
derekthomas
Posted 4/24/2016 7:12:06 PM
Supreme Being

Supreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme Being

Group: Moderators
Last Login: 11/14/2013 3:17:47 PM
Posts: 237, Visits: 0
This event will only be logged on the workstation that this event was generated on. You need to enable the following audit setting:Logon/Logoff->Other Logon/Logoff Events-> Success
Post #5195
« Prev Topic | Next Topic »


Permissions Expand / Collapse

All times are GMT -5:00, Time now is 3:52pm