Hide this message
Welcome to the NEW Success Center. Search all resources (documentation, videos, training, knowledge base articles) or browse resources by product. If you are unable to find what you are looking for, please contact us at firstname.lastname@example.org
This article provides brief information and steps to resolve the issue when you are unable to find any interactive Logon events for your Windows host.
UserLogon events in nDepth and other type of events are visible, except interactive Logon.
All LEM versions
The issue is caused when account events are logged on to the domain controller, but actual logon events are logged on to the local machines.
In order to log Interactive Logon events from your workstations, you must meet the following conditions:
If the above conditions are true, you should be able to locate Interactive Logon events in nDepth by searching for the following conditions:
UserLogon.LogonType = Windows: Interactive
User.LogonType = Windows: Remote Interactive Logon
For additional information, see Audit logon events from the Microsoft website.