Windows 10 logon event id free download.Download the Free Windows Security Log Quick Reference Chart

Looking for:

Windows 10 logon event id free download. 4801(S): The workstation was unlocked. 

Click here to DOWNLOAD

     

Audit logon events (Windows 10) - Windows security | Microsoft Docs

  Audit Special Logon determines whether the operating system generates audit events under special sign on (or log on) circumstances. This event is generated when workstation is unlocked. you correlate this event with recent events that might contain the same Logon ID. Describes security event (S) An account was logged off. This event is generated when a logon session is terminated and no longer exists.