none
EVENT ID (EVENT VIEWER), For Login/or Auto Login Microsoft Account in Windows 10 Pro RRS feed

  • General discussion

  • Summary Question:

    Event ID for a event that a user Login or Auto Login his/her Microsoft Account via settings menu (On accounts settings, <the new settings app) on Windows 10 Pro.


    • Edited by wndnCG Wednesday, January 30, 2019 11:48 AM
    Wednesday, January 30, 2019 11:47 AM

All replies

  • Hi,

    Thanks for posting in Microsoft TechNet Forum.

    I'm sorry that I don't understand what you're trying to ask.

    Can you describe the problem you are experiencing in detail?

    Best regards,

    Hurry


    Please remember to mark the reply as an answer if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com


    Wednesday, January 30, 2019 3:15 PM
  • Hi,
    How things are going there on this issue?
    Please let me know if you would like further assistance.

    Best regards,

    Hurry


    Please remember to mark the reply as an answer if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com


    Friday, February 1, 2019 12:59 PM
  • Hi,

    Is there anything else I can do to help you on this issue?

    Please feel free to contact me if you have any questions.

    Best regards,

    Hurry


    Please remember to mark the reply as an answer if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com


    Sunday, February 3, 2019 11:04 AM
  • Hi,

    Thanks for posting in Microsoft TechNet Forum.

    I'm sorry that I don't understand what you're trying to ask.

    Can you describe the problem you are experiencing in detail?

    Best regards,

    Hurry


    Please remember to mark the reply as an answer if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com



    I'm asking an event id on event viewer for Microsoft account user account login event on windows 10 pro machines.

    Event ID For:

    Microsoft Account Login (Initial)

    Microsoft Account Login (With Profile just like with Wifi, "8002")

    (Picture shown below login using microsoft account (THIS I AM REFERRING TO)

    Monday, February 4, 2019 5:34 AM
  • Hi,

    Thank you for your feedback.

    Logon GUID [Type = GUID]: a GUID that can help you correlate this event with another event that can contain the same Logon GUID, “4769(S, F): A Kerberos service ticket was requested event on a domain controller.

    It also can be used for correlation between a 4624 event and several other events (on the same computer) that can contain the same Logon GUID, “4648(S): A logon was attempted using explicit credentials” and “4964(S): Special groups have been assigned to a new logon.”

    Best regards,

    Hurry


    Please remember to mark the reply as an answer if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com

    Monday, February 4, 2019 6:20 PM
  • Hi,

    Thank you for your feedback.

    Logon GUID [Type = GUID]: a GUID that can help you correlate this event with another event that can contain the same Logon GUID, “4769(S, F): A Kerberos service ticket was requested event on a domain controller.

    It also can be used for correlation between a 4624 event and several other events (on the same computer) that can contain the same Logon GUID, “4648(S): A logon was attempted using explicit credentials” and “4964(S): Special groups have been assigned to a new logon.”

    Best regards,

    Hurry


    Please remember to mark the reply as an answer if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com

    Will test today, will request to close thread and mark as answer later.
    Wednesday, February 6, 2019 10:37 AM
  • Event ID 4624 in the Security log.

    Wednesday, February 6, 2019 2:35 PM
  • Hi,

    Thank you for your feedback.

    Hope the above information will be helpful.

    Best regards,

    Hurry


    Please remember to mark the reply as an answer if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com

    Wednesday, February 6, 2019 6:55 PM
  • Hi,

    Thank you for your feedback.

    Logon GUID [Type = GUID]: a GUID that can help you correlate this event with another event that can contain the same Logon GUID, “4769(S, F): A Kerberos service ticket was requested event on a domain controller.

    It also can be used for correlation between a 4624 event and several other events (on the same computer) that can contain the same Logon GUID, “4648(S): A logon was attempted using explicit credentials” and “4964(S): Special groups have been assigned to a new logon.”

    Best regards,

    Hurry


    Please remember to mark the reply as an answer if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com

    Confirmed with 4624 & 4648 (While 4648 Has less logged than 4624 gives accurate time and date -Actual login/logout). strangely i can't mark it as answer in the forum.

    To forum mod, please close thread, Mark answer quoted above.

    Thanks Hurry.

    Thursday, February 7, 2019 3:12 AM
  • Hi,

    Thank you for your feedback.

    If my answer is helpful, please you vote. I don't know why you can't mark it as an answer.

    Thank you for your cooperation.

    Best regards,

    Hurry


    Please remember to mark the reply as an answer if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com

    Thursday, February 7, 2019 2:40 PM
  • How to vote???
    Friday, February 8, 2019 1:44 AM
  • Hi,

    Thank you for your feedback.

    Please see the screenshot below for detail:

    Best regards,

    Hurry


    Please remember to mark the reply as an answer if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com

    Friday, February 8, 2019 3:13 PM
  • Hi,

    Thank you for your feedback.

    Please see the screenshot below for detail:

    Best regards,

    Hurry


    Please remember to mark the reply as an answer if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com


    Done and thanks.
    Tuesday, March 12, 2019 10:37 AM
  • Mods, Kindly close/marked as answered.
    Saturday, August 31, 2019 5:22 AM