Read Logoff and Sign Out Logs in Event Viewer in Windows  

    Read Logoff and Sign Out Logs in Event Viewer in Windows

    Read Logoff and Sign Out Logs in Event Viewer in Windows

    How to Read Logoff and Sign Out Logs in Event Viewer in Windows
    Published by Category: Performance & Maintenance
    19 Apr 2022
    Designer Media Ltd



    How to Read Logoff and Sign Out Logs in Event Viewer in Windows


    When a user logs off (sign out) of Windows, all of the apps you were using are closed, but the PC isn't turned off. Another person can log in (sign in) without needing to restart the PC.

    You can use Event Viewer to view the date, time, and user details of all logoff events caused by a user initiated logoff (sign out).

    This tutorial will show you how to view the date, time, and user details of all user initiated logoff and sign out event logs in Windows 7, Windows 8, and Windows 10.



    Here's How:

    1 Press the Win + R keys to open Run, type eventvwr.msc into Run, and click/tap on OK to open Event Viewer.

    2 In the left pane of Event Viewer, open Windows Logs and Security, right click or press and hold on Security, and click/tap on Filter Current Log. (see screenshot below)

    If you have already filtered this log, click/tap on Clear Filter first and then click/tap on Filter Current Log to start over fresh.


    Read Logoff and Sign Out Logs in Event Viewer in Windows-user_initiated_logoff_event_logs-1.jpg

    3 Enter the 4647 event ID into the <All Event IDs> field, and click/tap on OK. (see screenshot below)

    Read Logoff and Sign Out Logs in Event Viewer in Windows-user_initiated_logoff_event_logs-2.png

    4 You can now view the details of user initiated logoff event logs. (see screenshot below)

    Read Logoff and Sign Out Logs in Event Viewer in Windows-user_initiated_logoff_event_logs-3.jpg

    5 When finished viewing log details, you can close Event Viewer if you like.


    That's it,
    Shawn Brink





  1. Posts : 16
    Windows 10 21H2 x64
       #1

    Hi Brink,
    Just a quick typo correction on this one. Step 2 indicates that the user/admin should access the Windows "System" log to filter for Logoff events. The images however show the "Security" log. The images are correct, Logoff events are in the security log. I think Step 2 needs to be corrected to say "Security" instead of "System". Thanks!
      My Computer


  2. Posts : 61,861
    64-bit Windows 11 Pro for Workstations
    Thread Starter
       #2

    bumgarb42 said:
    Hi Brink,
    Just a quick typo correction on this one. Step 2 indicates that the user/admin should access the Windows "System" log to filter for Logoff events. The images however show the "Security" log. The images are correct, Logoff events are in the security log. I think Step 2 needs to be corrected to say "Security" instead of "System". Thanks!
    Thank you. Now corrected.
      My Computers


 

Tutorial Categories

Read Logoff and Sign Out Logs in Event Viewer in Windows Tutorial Index Network & Sharing Instalation and Upgrade Browsers and Email General Tips Gaming Customization Apps and Features Virtualization BSOD System Security User Accounts Hardware and Drivers Updates and Activation Backup and Restore Performance and Maintenance Mixed Reality Phone


  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 23:43.
Find Us




Windows 10 Forums