Hi,
Are 551 events ("user initiated logoff") only seen when logging out of
"interactive" logons (Type 2), or can they occur for "Remote
Interactive" logouts (Type 10)?
How about logouts from cached logons?
Any help appreciated.
A pointer where I can look this info up would be welcome too - I only
see vagueness!
Thanks a lot,
Kevin
>> Stay informed about: 551 Security Event ID