Knowledge Base


Microsoft Windows 2000 and earlier have a problem where the logoff events with event ID 538 which are intercepted by EventSentry are sometimes not logged to the security event log. Since the Logon Tracking feature of EventSentry depends on audit events being written to the security event log Logon Tracking cannot work properly if the OS ...

KB-ID 74
Category: Logon Tracking
Applies to: