<div>
Yet another absurd shortcoming of Microsoft's. How wonderful! My decision to move to Linux is confirmed each and every day. Thanks for the help!
</div>


Yet another absurd shortcoming of Microsoft's. How wonderful! My decision to move to Linux is confirmed each and every day. Thanks for the help!

<div>
<div class="content wysiwyg-content">
I have a terminal server with 2003 sp2 that shows some odd behavior. A user can log off the server using the log off function. This will generate an event in the security log #551 (User initiated logoff). The corresponding event 538 does not appear sometimes until hours later for that logoff event. Any ideas what this is about? Thanks!
</div>
</div>


I have a terminal server with 2003 sp2 that shows some odd behavior. A user can log off the server using the log off function. This will generate an event in the security log #551 (User initiated logoff). The corresponding event 538 does not appear sometimes until hours later for that logoff event. Any ideas what this is about? Thanks!

Long delay between event ID 551 and 538

Windows Server 2003 was based on Windows XP and was released in four editions: Web, Standard, Enterprise and Datacenter. It also had derivative versions for clusters, storage and Microsoft’s Small Business Server. Important upgrades included integrating Internet Information Services (IIS), improvements to Active Directory (AD) and Group Policy (GP), and the migration to Automated System Recovery (ASR).

Windows Server 2003

Security is the protection of information systems from theft or damage to the hardware, the software, and the information on them, as well as from disruption or misdirection of the services they provide. The main goal of security is protecting assets, and an asset is anything of value and worthy of protection.  Information Security is a discipline of protecting information assets from threats through safeguards to achieve the objectives of confidentiality, integrity, and availability or CIA for short. On the other hand, disclosure, alteration, and disruption (DAD) compromise the security objectives.