windows 11 Show User Logons

[Guest Mark Khan]

Good Afternoon:.I am running Windows 11 and I need to be able to sort through the security log to find only the "human" user account logons for both the local computer and anyone who has accessed the computer remotely. I have gone through the process of turning on auditing on the local computer for both success and failures. I understand how to search on the event ID codes of 4624 and 4627. When I search on 4624. I get all the system accounts in the log file along with the user accounts. I know that the user (human) accounts are reported as a type 2, I can't figure out how to filter so it just

 

Continue reading...