none
Event ID RRS feed

  • Question

  • Hi, 

    I understand that we can track login info via event ID 4624 (successful login).  However, the userID and computer name are logged under  2 separate events.  Is there any eventID  that shown both userID and computer name in one single event?  

    Tuesday, July 25, 2017 1:45 PM

All replies

  • Thanks  but this is not what i want.  I was tracking all the event logs from domain controller and want to know if any SINGLE event ID that can tell me who was login to the network (domain) and the hostname / workstation name he login from.  

    Do you think it is possible? 

    Wednesday, July 26, 2017 8:50 AM