Interactive logon Expand / Collapse
Author
Message
Posted 11/28/2018 4:15:09 AM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: Forum Members
Last Login: 8/1/2018 4:19:45 AM
Posts: 1, Visits: 0
When a user login in to a PC located in the domain, on the domain controller we see only event 4624 event type 3. As a result, we cannot separate interactive logons from network logon. How to make the controller see inputs on workstations using interactive login type 2 ?
Post #8526
Posted 1/5/2019 10:30:31 AM
Supreme Being

Supreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme Being

Group: Moderators
Last Login: 11/14/2013 3:17:47 PM
Posts: 223, Visits: 0
Interactive logins are identified by the Login Event 4624 with Logon type 2. This event will only be generated on the host that the user was interactively logging in to. The domain controller would not see this activity.
Post #8532
« Prev Topic | Next Topic »


Permissions Expand / Collapse

All times are GMT -5:00, Time now is 4:48am