2 Replies Latest reply on Feb 5, 2013 2:36 PM by nicole pauls

    UserLogoff without a UserLogon


      Was reviewing some logs to see who was on a system at a specific time and found 3 different users with a UserLogoff; however, there is no corresponding UserLogon.  The specific system in question is a non-domain system (local accounts only) and the LogonType for the UserLogoff events was "Windows: Remote Interactive Logon".


      Any ideas on what would cause this or how it's possible?