[Webinar] Streamline your web hosting managementRegister Today

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 280
  • Last Modified:

Expected Security Event Logs of "Event type: 2" not present

Hello all,

According to http://www.windowsecurity.com/articles/logon-types.html, I should see "Logon type:2" on the DC when a user logs in, but all I see are Type:3". There's no log filtering in place.

The Type:3 events do align with when a given user logs in, but there are more than a dozen such related events within a minute of an actual at-keyboard logon which makes the logs hard to parse.

I've made sure that the user is actually logging in and not just unlocking the computer.

Should I not see type:2 in the security logs?
0
nathanwc
Asked:
nathanwc
  • 3
  • 2
2 Solutions
 
Mike KlineCommented:
Type 2 events would be on their machines.  That is an interactive login.

Thanks

Mike
0
 
nathanwcAuthor Commented:
OK, so I checked the security event viewer on one of the desktops that's used everyday - there hasn't been a security entry logged on that machine since 2006.
0
 
Mike KlineCommented:
Not sure how you have auditing setup on the desktops.  I logged in interactively (keyboard) on my test DC.  See attached logon 2 event.

Thanks

Mike
logontype.jpg
0
 
nathanwcAuthor Commented:
OK, to abandon. Not worth pursuing.
0
 
nathanwcAuthor Commented:
mklin71's answer probably was correct and complete, but I no longer needed to pursue. Thank you for the help, Mike!
0

Featured Post

Get your problem seen by more experts

Be seen. Boost your question’s priority for more expert views and faster solutions

  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now