I have found the following information pertaining to when a user starts and stops interacting with a Windows 7 Home Premium 64-bit PC. Theoretically, these events can be viewed in eventvwr.exe
when run as Administrator.
However, I have tried locking and unlocking the workstation and nothing shows up in the log. What must I do to enable this behavior?
Logon Session Events
- 4624 Successful logon
- 4647 User initiated logoff
- 4625 Logon failure (See Logon Failure Codes)
- 4778 Remote desktop session reconnected
- 4779 Remote desktop session disconnected
- 4800 Workstation locked
- 4801 Workstation unlocked
- 4802 Screen saver invoked
- 4803 Screen saver dismissed
UPDATE:
@DavidPostill, I have tried the solution below, downloading and running the file you mentioned, and copying the C:\SysWOW64\gpedit.msc
file to C:\Windows\System32\gpedit.exe
, but I ran into the following problem:
The files C:\SysWOW64\GroupPolicy
and C:\SysWOW64\GroupPolicyUsers
could not be copied to C:\Windows\System32\GroupPolicy
and C:\Windows\System32\GroupPolicyUsers
because these folders already existed.
Here is what I get when I run gpedit.msc
:
Best Answer
What must I do to enable logging of Logon Session Events?
Use the Group Policy Editor (
gpedit.msc
) to enable auditing of Account Logon Events in the Windows Security Event Log.Note: Windows Starter Edition, Home and Home Premium do not include
gpedit.msc
. Instructions to install it are provided later in this answer.To enable auditing of Account Logon Events:
Run gpedit.msc
Select "Windows Settings" > "Security Settings" > "Local Policies" > "Audit Policy"
Right click "Audit account logon events" and select "Properties"
Check "Success" and "Failure" as appropriate, then click "OK"
How do I install gpedit.msc on Windows Starter Edition, Home and Home Premium?
I used the following procedure to successfully install
gpedit.msc
on Windows 7 64 bit Home Premium.It apparently works on Windows 8 and Windows 8.1 as well.
Source How to Enable "Group Policy Editor" (gpedit.msc) in Windows 7 Home Premium, Home Basic and Starter Editions?