Archive

The Key Difference between “Account Logon” and “Logon/Logoff” Events in the Windows Security Log


An area of audit logging that is often confusing is the difference between two categories in the Windows security log: Account Logon events and Logon/Logoff events.  These two categories are related but distinct, and the similarity in the naming convention contributes to the confusion.