• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 307
  • Last Modified:

538 logoff events not being created reliably on Citrix server

On our Citrix Server (Metaframe XP  on W2K server) logoff events (538 in event viewer) are not being logged at all consistently.  Logon seems to be audited every time, but much of the time there is no indication of when, or if, the user has logged off.  Very irregularly a 538 event will be logged, with no pattern that I can see.  I have checked the security policy and the audit policy is configured to audit logon events.  
1 Solution
Zaheer IqbalTechnical Assurance & ImplementationCommented:
How long has this been happening for?

Please check the following http://www.eventid.net/display.asp?eventid=538&eventno=7&source=Security&phase=1
tararatAuthor Commented:
We were in the process of replacing this server, so we decided not to invest much energy into solving this issue.  Thanks.  

Featured Post

Free learning courses: Active Directory Deep Dive

Get a firm grasp on your IT environment when you learn Active Directory best practices with Veeam! Watch all, or choose any amount, of this three-part webinar series to improve your skills. From the basics to virtualization and backup, we got you covered.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now