Re: win2003 eventID:528 with Login type 12

"Frank Heyne" <[email protected]>
Newsgroups gmane.comp.sysutils.loganalysis
Message-ID <[email protected]>
> Any one come across documentation for an Win 2003 528 event with the
> Login type set to 12?  All documentation I can find doesn't list the
> type 12 login.

Logogn type 12 is CachedRemoteInteractive 
They say it is the same as RemoteInteractive (10), except used internally 
for auditing purposes. 

See http://msdn2.microsoft.com/en-us/library/aa380129.aspx

Frank Heyne
http://www.heysoft.de/
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.