| Details | |
| Product: | Windows Operating System |
| Event ID: | 538 |
| Source: | Security |
| Version: | 5.2 |
| Symbolic Name: | SE_AUDITID_LOGOFF |
| Message: | User Logoff: User Name: %1 Domain: %2 Logon ID: %3 Logon Type: %4 |
| Explanation | |
|
This event record indicates that a user has logged off. |
|
| User Action | |
|
This event record indicates that a user has logged off. |
|