Microsoft Windows 2000 and earlier have a problem where the logoff events with event ID 538 which are intercepted by EventSentry are sometimes not logged to the security event log. Since the Logon Tracking feature of EventSentry depends on audit events being written to the security event log Logon Tracking cannot work properly if the OS ...
Getting Started Logon Tracking allows you to track console logons as well as a variety of network logons both failed and successful. This feature can be found as a tracking item in the EventSentry Management console and requires a database. Verifying your settings Click the Logon/Logoff item in the Complete Trackin...
