Event Details
User Activity->Logons->Successful Logons->Windows 2000-2003->EventID 540 - Successful Network Logon [Win 2000]
EventID 540 - Successful Network Logon [Win 2000]
 Sample: 
Event Type:     SuccessAudit
Event Source:   Security
Event Category: Logon/Logoff
Event ID:       540
Date:           11/13/2009 12:00:00 AM
Time:           11:32:54
User:           NT AUTHORITY\SYSTEM
Computer:       DCCC1
Description:    
Successful Network Logon:

	User Name:	DCCC1$

	Domain:		LOGISTICS

	Logon ID:		(0x0,0x414989)

	Logon Type:	3

	Logon Process:	Kerberos

	Authentication Package:	Kerberos

	Workstation Name:
Log Type: Windows Event Log
 Uniquely Identified By:
Log Name: Security
Filtering Field Equals to Value
OSVersion Windows 2000
Source Security
Category Logon/Logoff
EventId 540
Field Matching
FieldDescriptionStored inSample Value
When At what date and time a user activity originated in the system. DateTime 12/14/2009 6:59:09 AM
Who Account or user name under which the activity occured. User Name DCCC1$
What The type of activity occurred (e.g. Logon, Password Changed, etc.) "Logon" Logon
Where The name of the workstation/server where the activity was logged. Computer DC1
Where From The name of the workstation/server where the activity was initiated from. Workstation Name
Severity Specify the seriousness of the event. "Medium" Medium
WhoDomain Domain RESEARCH
WhereDomain -
Result Successful or Failed. "Successful" Successful
Failure Reason "Successful" Successful
Comments
You must be logged in to comment