The Authentication Information reveals information about the authentication package used for logon.If the logon was initiated from the same computer, this information will either be blank or reflect the local computer's workstation name and source network address. The Network Information section reveals where the user was when they logged on.The Process Information section reveals details surrounding the process that attempted the logon.The Impersonation Level section reveals the extent to which a process in the logon session can impersonate a client. Impersonation Levels determine the operations a server can perform in the client's context.The Subject section reveals the account on the local system (not the user) that requested the logon.Other information that can be obtained from Event 4624: the domain controller was not contacted to verify the credentials). Occurs when a user logs on to their computer using network credentials that were stored locally on the computer (i.e.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |