locked
Logoff logs not appearing RRS feed

  • Question

  • Hi,

    My company has setup a web server using iis.

    The website allows user to login to the website, launch RDP and remote into server or workstations.

    Currently, our server is able to capture the following logs:

    4624-when user login to the website

    4778-when user launch RDP

    4779-when user logoff from RDP

    However, the server is unable to capture the logs for logoff from the website.

    I ran auditpol.exe and find the logoff category "success and failure" are logged. What could be other reason for the missing logs?

    Tuesday, June 16, 2020 9:40 AM

All replies