Active Administrator is only capable of collecting and reporting on Logon Types 2 (interactive) and 10 (remote) for Event ID 4624.
If more granular robust auditing is required, please use the Change Auditor product: https://www.quest.com/change-auditor/
© ALL RIGHTS RESERVED. Feedback 使用条款 隐私 Cookie Preference Center