Re: win2003 eventID:528 with Login type 12

> Any one come across documentation for an Win 2003 528
event with the
> Login type set to 12?  All documentation I can find
doesn't list the
> type 12 login.

Logogn type 12 is CachedRemoteInteractive 
They say it is the same as RemoteInteractive (10), except
used internally 
for auditing purposes. 

See http://msdn2.microsoft.com/en-us/library/aa380129.aspx


Frank Heyne
http://www.heysoft.de/

_______________________________________________
LogAnalysis mailing list
LogAnalysislists.shmoo.com
h
ttp://lists.shmoo.com/mailman/listinfo/loganalysis