troubleshooting Question

User Logon/Logoff tracking

Avatar of lakshmanl
lakshmanlFlag for Afghanistan asked on
Windows Server 2003
2 Comments1 Solution1330 ViewsLast Modified:
Hi All,
I am trying to track the logon/logoff activity of  users.  I have turned on "Audit Logon Events"  and when I look in the event log, I get IDs 538,576 & 540  repeatedly for the same user id.  These occur almost constantly for each user
and there can be hundreds of logon/logoff events for the same user in the
same day.

Wat have I got configured wrong?  I know our users are not actually logging on and off that often.

Thanks and regards


Our community of experts have been thoroughly vetted for their expertise and industry experience.

Join our community to see this answer!
Unlock 1 Answer and 2 Comments.
Start Free Trial
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 1 Answer and 2 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros