Who will create event records when login/logout Windows ?

السؤال Who will create event records when login/logout Windows ?

  • 2011年11月11日 上午 09:36
     
     

    There are some events which we don't know who will generate them. Those events are created when user log into/logout from Windows 2008 or other Windows Server O.S. Thus I would like to know if those events are generated by Windows O.S. or not?

    =====================================
    We got the events data like below:
    Record Type  = 0x00
    Generator ID = 0x41 0x00
    Event Message Format = 0x04
    Sensor Type = 0x1F(OS Boot) or 0x20(OS Stop)
    Sensor number = 0x00
    Event Type = 0x6F(sensor-specific discrete)

    Use O.S.:Windows Server 2008

     


所有回覆

  • 2011年11月11日 上午 09:33
     
     

    There are some events which we don't know who will generate them. Those events are created when user log into/logout from Windows 2008 or other Windows Server O.S. Thus I would like to know if those events are generated by Windows O.S. or not?

    =====================================
    We got the events data like below:
    Record Type  = 0x00
    Generator ID = 0x41 0x00
    Event Message Format = 0x04
    Sensor Type = 0x1F(OS Boot) or 0x20(OS Stop)
    Sensor number = 0x00
    Event Type = 0x6F(sensor-specific discrete)

    Use O.S.:Windows Server 2008


  • 2011年11月11日 上午 09:35
     
     

    There are some events which we don't know who will generate them. Those events are created when user log into/logout from Windows 2008 or other Windows Server O.S. Thus I would like to know if those events are generated by Windows O.S. or not?

    =====================================
    We got the events data like below:
    Record Type  = 0x00
    Generator ID = 0x41 0x00
    Event Message Format = 0x04
    Sensor Type = 0x1F(OS Boot) or 0x20(OS Stop)
    Sensor number = 0x00
    Event Type = 0x6F(sensor-specific discrete)

    Use O.S.:Windows Server 2008


  • 2011年11月11日 上午 10:05
    擁有者
     
     
    Hi, 請您確定產品類型及選擇正確版區發文, 並且請勿重複發文. 謝謝您!
    請記得對您有幫助的回覆標註為"解答". 以幫助其他尋找解答及參與社群討論的朋友們.
    Please remember to click “Mark as Answer” on the post that helps you. This can be beneficial to other community members reading the thread.