| Event Id | 682 |
| Source | Security |
| Description | Session reconnected to winstation: User Name: <User Name> Domain: <Domain> Logon ID: <Logon ID> Session Name: <Session Name> Client Name: <Client Name> Client Address: <Client Address> |
| Event Information | According to Microsoft : Cause : A user reconnected to a disconnected terminal server session, or an administrator opened or reestablished the connection to the remote computer. This message is logged for informational purposes only. Resolution : No user action is required. |
| Reference Links | Event ID 682 from Source Security Alternate Event ID in Vista and Windows Server 2008 is 4778. |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.