[logs] Re: win2003 eventID:528 with Login type 12

Previous message: Mordechai T. Abzug: "[logs] Re: on database logging"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

loglist@private

> Any one come across documentation for an Win 2003 528 event with the
> Login type set to 12?  All documentation I can find doesn't list the
> type 12 login.

Logogn type 12 is CachedRemoteInteractive 
They say it is the same as RemoteInteractive (10), except used internally 
for auditing purposes. 

See http://msdn2.microsoft.com/en-us/library/aa380129.aspx

Frank Heyne
http://www.heysoft.de/

_______________________________________________
LogAnalysis mailing list
LogAnalysis@private
http://lists.shmoo.com/mailman/listinfo/loganalysis