Access Denied: Understanding Logon Type 10

Find out what logon type 10 tells you about an event.

ITPro Today

November 9, 2003

1 Min Read
ITPro Today logo in a gray background | ITPro Today

Since upgrading our servers to Windows Server 2003 and our workstations to Windows XP, we've noticed a new logon type in the Security log for event ID 528 (Successful Logon). What does logon type 10 mean?

Logon type 10 refers to remote interactive logons. Event ID 528 with logon type 10 means that the user logged on to the computer through RDP by using either Remote Desktop or Windows 2000 Server Terminal Services. Table 1 summarizes all logon types.

Sign up for the ITPro Today newsletter
Stay on top of the IT universe with commentary, news analysis, how-to's, and tips delivered to your inbox daily.

You May Also Like