立即与支持人员聊天

获得即时帮助
完成注册

登录

请求定价

联系销售人员

Change Auditor for Logon Activity 7.0.2 - Event Reference Guide

Introduction Change Auditor for Logon Activity Events

Authentication Activity Domain Controller Authentication Logon Session

Logon Session


	NOTE: Logon Session events for servers are available with the Change Auditor for Logon Activity User auditing module. Logon Session events for workstations require the Change Auditor for Logon Activity Workstation auditing module and workstation agents to be deployed to the workstations to be monitored.

Table 3. Logon Session events
Event	Description	Severity
A user session took place	Created when a user session took place on a monitored computer.	Medium
A user session was ended by the screensaver turning on	Created when a user session is ended because the screensaver turned on.	Medium
A user session was ended by user locking the computer	Created when a user session is ended because the user locked up the computer.	Medium
A user session was ended by user logging off	Created when a user session is ended because the user logged off.	Medium
A user session was ended by user stopping a terminal services connection	Created when a user session is ended because the user stopped a terminal services connection.	Medium
A user session was ended due to computer shutdown	Created when a user session is ended because a user has shut down or restarted the computer.	Medium
A user session was ended due to user switch	Created when a user session is ended because a different user has logged on.	Medium
A user session was started	Created when a user session is started on a monitored computer.	Medium
A user session was started before the start of the user session monitoring service	Created when a new user session is started before the user session monitoring service is started.	Medium
A user session was started by user exiting screensaver mode	Created when a new user session is started because the user exited the screensaver mode.	Medium
A user session was started by user making a terminal services connection	Created when a new user session is started because a user logged in through a terminal services connection.	Medium
A user session was started by user unlocking the computer	Created when a new user session is started because the user unlocked the computer.	Medium
A user session was started due to user switch	Created when a new user session is started because a different user has logged on.	Medium
An incorrectly finished user session was found	Created when an incorrectly finished user session is found when the user session monitoring service is started.	Medium

相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级

© 2024 Quest Software Inc. ALL RIGHTS RESERVED. Feedback 使用条款隐私 Cookie Preference Center