locked
Event Id RRS feed

  • 問題

  • Dears

    Would you plesae tell me the difference between "username" & "USERNAME$" showed in the event log as below. thanks

    regards
    Tony


    EventID 538 entry:

    User Logoff:
    User Name: username
    Domain: domainuser
    Logon ID: (0x0,0x92063C)
    Logon Type: 3


    EventID 540 entry:

    Successful Network Logon:
    User Name: USERNAME$
    Domain: domain
    Logon ID: (0x0,0x9206AC)
    Logon Type: 3
    Logon Process: Kerberos
    Authentication Package: Kerberos
    Workstation Name:
    Logon GUID: {332dbd11-824c-fc57-9d9d-d9e731fccec5}
    Caller User Name: -
    Caller Domain: -
    Caller Logon ID: -
    Caller Process ID: -

    2009年5月21日 上午 02:05