Tuesday, September 3, 2013

Windows Logon Types and Logs, Are you sure no one has been on?


Are you absolutely sure no one has been logged in on your computer?
There are many ways to know for sure, but one thing is for definate. The logs in M$ Windows don't lie.
                       http://www.rohos.com/1/wp-content/uploads/2011/04/windows-7-usb-key-login.jpg

Windows has multiple logon types and often appear in the Windows event logs – this is what they translate to.

Logon Type 0 = System Only
Logon Type 1 = unknown
Logon Type 2 = Interactive Logon
Logon Type 3 = Network
Logon Type 4 = Batch
Logon Type 5 = Service
Logon Type 6 = (proxy logon)
Logon Type 7 = Unlock Workstation
Logon Type 8 = Network Clear Text
Logon Type 9 = New Credentials
Logon Type 10 = Remote Interactive (Windows XP and newer operating systems only).
Logon Type 11 = Cached Interactive
Logon Type 12 = CachedRemoteInteractive
Logon Type 13 = CachedUnlock

To Access your Event logs.
http://www.microcenter.com/images/email/random_access/2007/0507/01_manage_large.jpgJust right click on your My Computer Icon and click on Manage.
From there you can view your logs











Your quick summary page for the current machine you are at will be located under System Tools, Event Viewer, Custom Views, and Summary Page Events.



Logs are very important in today's age when remote connections are constantly being used and is integrated with any and all O\S. Sometimes they can be legitimate, sometimes they may not. You will be the one that decides.
Logs are also very interesting thing to read, feel free to go through them, you may end up knowing why your system maybe blue screening, or if there are any errors going on the system you may want to address.

No comments:

Post a Comment