Search code examples
windowsevent-viewer

Eventviewer eventid for lock and unlock


What is the event id in Event Viewer for lock, unlock for a computer in Windows XP, Windows 7, Windows Vista and Windows Server 2008?


Solution

  • The event IDs to look for in pre-Vista Windows are 528, 538, and 680. 528 usually stands for successful unlock of workstation.

    The codes for newer Windows versions differ, see below answers for more infos.