Event ID - 4779

Event Id4779
SourceMicrosoft-Windows-Security-Auditing
DescriptionA session was disconnected from a Window Station.

Subject:
      Account Name: <Account Name>
      Account Domain:<Domain Name>
      Logon ID: <Logon ID>     

Session:
      Session Name: <Session Name>     

Additional Information:
      Client Name: <Client Name>
      Client Address: <Client Address>     

Event InformationCause :
This event is logged when an user disconnects from a terminal server session and also logged when a user returns to an existing logon session via Fast User Switching.
Resolution :
This is an information event and no user action is required.
Reference Links

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.