Welcome to Event-o-Pedia

Search Advanced Ex: logon failure -"account disabled" -"LogType:Windows Event Log" 1 event(s) found in the alternate event classification Events by Business Needs Found categories (1 - Events, 0 - Folders): EventID 4647 - User initiated logoff. Indicates that a user that had logged on interactively (type 2) or by terminal services has started the logoff process. This event means that the system started erasing from memory user's primary a... Operating System->Microsoft Windows->Built-in logs->Windows 2008 or higher->Security Log->Logon/Logoff->Logoff->EventID 4647 - User initiated logoff.