Events with an ID of 4624 display an interactive logon with logon type of 3 - Why does this happen?


  • I've got an active directory lab setup with a domain controller and two members. These are all virtual machines. Whenever I log into one of the members from the VM console and not over the network, an event with the event ID 4624 is logged, but with a logon type of 3. From the information I've come across, I'm supposed to get a logon type of 2 and not 3.
    • Edited by Savio89 Wednesday, December 7, 2016 5:19 PM
    Wednesday, December 7, 2016 5:17 PM

All replies

  • Hi

     Check the article for "Logon type – what does it mean?"

    This posting is provided AS IS with no warranties or guarantees,and confers no rights. Best regards Burak Uğur

    Wednesday, December 7, 2016 6:13 PM
  • Hi,

    I am checking how the issue going, if you still have any questions, please feel free to contact us.

    And if the replies as above are helpful, we would appreciate you to mark them as answers, and if you resolve it using your own solution, please share your experience and solution here. It will be greatly helpful to others who have the same question.

    Appreciate for your feedback.

    Best regards,


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact

    Monday, December 12, 2016 8:11 AM