|
Been a while since I used NT, but Google found the security FAQ, this a logoff (538) which doesn't record username apparently
"If it is 3 (Network logon), so it is a network logon/logoff. Such an event occurs, if a user connects to a share, for instance. There is also a setting on the server called "Autodisconnect if a session is idle more than x min", with a default of 15 min. So even if a user is connected to a share for hours, you can get a lot of such events because the server will disconnect after the idle time and reconnect if the share is accessed the next time. This is transparent to the user."
-doug
__________________
XYCash International Gay Affiliate Program
|