Event Id | 683 |
Source | Security |
Description | Session disconnected from winstation: User Name: <User Name>       Domain: <Domain>       Logon ID: <Logon ID>       Session Name: <Session Name>       Client Name: <Client Name>       Client Address: <Client Address>      |
Event Information | According to Microsoft : Cause : A user disconnected from another computer without logging off. The connection was either a terminal server session or a remote administration session. This message is logged for informational purposes only. Resolution : No user action is required. |
Reference Links | Event ID 683 from Source Security Alternate Event ID in Vista and Windows Server 2008 is 4779. |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.