| Event Id | 4002 |
| Source | Microsoft-Windows-Winlogon |
| Description | The logon hours restriction policy is applied to the logged on user. The user's session has been locked, disconnected or logged off depending on the policy setting. User Name: %1 Domain Name: %2 |
| Event Information | According to Microsoft : Cause : This event is logged when the logon hours restriction policy is applied to the logged on user Resolution : This is a normal condition. No further action is required. |
| Reference Links | Event ID 4002 from Microsoft-Windows-Winlogon |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.