Security log 4634 shows another user logging off

Security log shows users logoff that weren't even using the machine. There are no 4642 logon logs, just the 4643 logoff logs.
These user aren't even accessing another machine via the network. All machines also have no malware or virus on them.
Logon Type: 3
This event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer.
What could be causing this?

It's a domain enviroment. Printers are all through a Print Server.
Below is the log of 1 such event.
Log Name:      Security
Source:        Microsoft-Windows-Security-Auditing
Date:          2014-04-04 03:04:24 PM
Event ID:      4634
Task Category: Logoff
Level:         Information
Keywords:      Audit Success
User:          N/A
Computer:      (computer name.domain)
Description:
An account was logged off.
Subject:
Security ID:
S-1-5-21-213254720-224688177-246369
Account Name:
(username)
Account Domain:
(domain)
Logon ID:
0x197EC67
Logon Type: 3
This event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Security-Auditing" Guid="{54849625-5478-4994-A5BA-3E3B0328C30D}" />
    <EventID>4634</EventID>
    <Version>0</Version>
    <Level>0</Level>
    <Task>12545</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8020000000000000</Keywords>
    <TimeCreated SystemTime="2014-04-04T13:04:24.783747600Z" />
    <EventRecordID>108300</EventRecordID>
    <Correlation />
    <Execution ProcessID="724" ThreadID="756" />
    <Channel>Security</Channel>
    <Computer>(computer name.domain)</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="TargetUserSid">S-1-5-21-213254720-224688177-246369</Data>
    <Data Name="TargetUserName">(username)</Data>
    <Data Name="TargetDomainName">(domain)</Data>
    <Data Name="TargetLogonId">0x197ec67</Data>
    <Data Name="LogonType">3</Data>
  </EventData>
</Event>

Similar Messages

  • Application won`t start - starts when logged in as another user

    An application created by Unity doesn`t start. When I double click (or right mouse click and choose `open`) nothing happens. However, when I log in as another user, or when I try to run the same program from a flash drive, it works. I tried a lot, including repairing permissions, but nothing helped.
    Thanks in advance !

    Try logging into your user while holding down the shift key on your keyboard, to supress any startup items that may be interfering with your program.
    If that does not do it, look for a preference file in you user folder by choosing the Go menu from the Finder and selecting Go to Folder and enter ~/Library/Preferences and checking for files having to do with your application. If there are any, move them to your desktop and try again.
    If that does not fix it, move them back, replacing the new ones that will be built. Also, if your program uses any data files or libraries when started up, try removing those. Again, if not fixed, put them back.

  • Says another user logged on? HELP!!

    Since the day I got my ipod it doesn't always show up on itunes.but I finally got that to work and down loaded songs. and now again it doesnt show up once I plug it in and ALSO now it says "Another user on this computer is using the iPod sowftware,so iTunes is unable to communicate with this iPod.Please ask the other user to log out." but the main thing about that is i am the only user on this computer that is using iPod on here and only have the iTunes window open...what is suggested i do?

    1. Close iTunes.
    2. Open Task Manager by pressing CTRL-SHIFT-ESC.
    3. Click the Processes tab.
    4. Find iPodService.exe. Click it.
    5. Click End Process.
    6. Select Yes to the "are you sure?" dialog.
    7. Close Task Manager.
    8. Start iTunes.
    Problem gone.
    This problem occurs from using Fast User Switching in Windows XP. Avoid using Fast User Switching and it shouldn't happen again. But the above procedure will fix it every time.

  • I can no longer edit images on external drive if logged in as another user even with permission.

    I have two users on my computer. Me (admin) and another log-in for assistants, clients etc.
    I use an external drive to hold images.
    Lately I've had a problem where if I'm logged in as Other (this side for everyone else), I often am not able to edit images even though the permissions are set for this log-in to have complete read/write capabilities?
    Even sometimes when I'm logged in regularly (my admin side) I have received a "File Reservation" error. It says the file is being used by another user.   ????
    Then it asks if I want to use Read-Only and do I want to be notified when the file becomes available. ????
    What's happened to my files?

    Similar problem here. My Ical refuses to edit or delete events. Viewing is possible, though sometimes the whole screen turns grey. Adding new events from mail is still possible. The task-pane completely disappeared. My local apple technic-centre messed about with disk utility for a bit and than told me to reinstall leopard. I could of course do that, but it seems to me that reinstalling Leopard just to fix iCal events is a bit invasive.
    I tried also tried removing everything, installing a new copy of iCal from the leopard-cd, software updates, all to no avail.
    At the moment I'm open to all suggestions that do not include a complete leopard reinstall.

  • How to show all user logged in/loggout in Report

    How to display All User Logged in time & Logout Time?
    Hi..
    I want to display All user in Portlet a report that show us all user that logged in the portal,
    their username,
    their time logged in,
    their time logged out..
    where can i find these information?
    do Portal have already something like this?
    Plz advise..Thanks.

    Thanks Sharmila for answering my question..
    Similar question i want to ask..
    I look at the table, and view it's data...
    Mmm..some i don't recognize...
    Actually, i just want to grep
    1)The UserId of the user who logged in the portal
    2)The time he logged in the portal
    3)the time he log out the portal
    That's all..
    How can i do that?..
    I plan to create one table to store the data, and plan to grab the data by jsp....
    What are the table/function/api that can i use and how?
    Plz advise.
    Thanks

  • Windows 2008 R2 TS VPN connection closed when another user logs in

    Hi.
    I have a W 2008 R2 Ent. server with TS
    I have VPN on the TS configured with a L2TP/Ipsec connection to connect to a customer site
    Users will remote into the server, and make a VPN connection (click on shortcut to start VPN) and access the customer's site. This has worked OK for 2 years often with several users logged into the TS via RDP.
    Recently users are encountering this problem: User A logs into the TS, makes VPN connection, accesses customer site. User B logs into the TS, user A's VPN connection is broken immediately. It seems to happen every time - not sporadic.
    Can I get some suggestions on how to troubleshoot this?
    Thanks!

    Hi,
    The error which you are facing is because of Event Id 20226 (RAS connection termination).
    Error 831 (ERROR_FAST_USER_SWITCH)
    The connection was terminated because user switch happened.
    There are multiple login sessions on the user's computer. The user switched from a login session with an active RAS connection to another session. This resulted in the termination of the connection.
    For this you can check that you can limit the connection and tried to switch back the original session and make all new connection again. Please refer “Event ID
    20226 — RAS Connection Termination” for more details.
    Hope it helps!
    Thanks.

  • AirPlay showing another users desktop. Security issue?

    Has anyone else see this or can replicate it? Login as one user and airplay from mountain lion, stop, login as another user and air play to apple tv, it shows user a's screen despite user b having no access to user a. Just had my wife viewing my desktop, not a happy bunny.

    That may be one reason the AirPlay icon changes color when active.

  • Word + Excel 2010 - Showing 'another user' on opening a file

    Hi,
    Bit of a odd question I would imagine but its quite a critical issue for us due to the nature of our work. All our employees have the latest Dell machines with Windows XP Pro and Office 2010 installed ... now we have a series of map drives (about 12) each
    having over 500,000 documents in (across various directories). Now when a user opens a document either in Word or Excel it goes ready only and produces the 'document can only be opened in read only' message.
    Now this is all normal, the bit that confuses me is 90% of the time it says 'document in use by another user' ... and 10% of the time, it will actually say the user who is in the document (using their logged in username) ... 
    In short, what I'm getting at is, how can I make office applications, namely word and excel say who is in the file, rather than 'another user'. This used to work perfectly in Office 2003 but since the upgrade to 2010 it's stopped.
    Thanks
    Mike 

    There is a public blog on file locking issues (http://blogs.technet.com/b/the_microsoft_excel_support_team_blog/archive/2012/05/14/the-definitive-locked-file-post.aspx).
    I would suggest the following:
    If you are seeing problems where the file is locked when double clicking from Windows Explorer, but the files open up correctly when opened in Excel or Word, do the following:
    Turn off the Preview Pane, Details Pane and pop ups that show information about file and desktop items
    This is a problem that has been reported to affect Windows 7 clients only, not Windows XP. The problem here may have something to do with the Windows Explorer in Windows 7. We are currently investigating this further and will post more information as it is
    available.
    In a Windows Explorer window, do the following:
    1. Right click on the Start Button.
    2. Click 'Open Windows Explorer'.
    3. At the top left click Organize > Layout
    4. Uncheck Details Pane and Preview Pane.
    5. On a Windows menu, click on Tools > Folder Options.  In the box that opens up, click on the View tab.  Scroll down the list to
    “Show pop-up description for folder and desktop items” and clear the checkbox and then click OK.
    If you are seeing issues where the wrong user name is showing up, there is a known bug on that and a fix:
    In cases where the wrong user name is displayed in the file lock dialog
    Sometimes where it says 'another user' it has the name of someone that didn't open the file or it has no name at all. Just a big ' ' where a name ought to be. Fear not, there is a fix for this problem. The flavor depends on
    whether you have Excel 2010 or Excel 2007. The below KB Articles contain hotfixes that address several issues, not just the file locked issue. But in the dialog of the article you will see this as one of the problem descriptions:
    Assume that you have an .xls file that is protected by Information Rights Management (IRM) on a network share. When you open the file in Excel 2007, a File In Use dialog box appears. However, the dialog box does not display the
    correct name of the user who locked the file. Therefore, you cannot edit the file.
    Understand that these fixes don't make the File in Use dialog go away, they just correct the problem of showing bogus user name information on the dialog itself.
    Excel 2007 -
    http://support.microsoft.com/kb/2598133
    Excel 2010 -
    http://support.microsoft.com/kb/2598143
    Will Buffington
    Microsoft Excel Support

  • When I log in with another user my wallpaper disappear

    Hi, I had this problem with mountain lion and still have it with mavericks
    I have three user accounts in my mac mini, one for each person in the family.
    When we switch between one user to another the wallpapers disappear showing only a solid background.
    It's very annoying to select a wallpaper everytime we log into our account.
    I'd appretiate if somebody can help me to fix this.
    Regards, and Happy New Year!

    I know of one other topic similar to this. I'm not sure if it was solved.
    When things like that revert back to the wrong settings, it is usually that the system cannot write to the preference list file, or in this case, the database.
    On the other topic, they tried deleting the desktop database and the desktop.plist, but I don't think it helped.
    If you are seeing this across the board for all users, it has to be something else interfering.
    Please try booting into Safe Mode and try changing desktop pictures, then switch users.
    Some things do not work in Safe Mode, and it might appear sluggish.
    http://support.apple.com/kb/HT1564
    If it works in Safe Mode, it is third-party software interfering.
    FYI:
    The database is in your user/Library/Application Support/Dock folder: desktop.db
    The preference list is in your user/Library/Preferences folder: com.apple.desktop.plist

  • Logging in to another user in B1

    Hello Guys
      Iam using SAP B1 2004 2B PL:40,(India)
      When iam trying to enter with another userID according to the Authorizations, When i Logged in to that, iam not able to open any document & getting a message "Generating this document requires numbering to be determined for the document" can any one please help me about this.

    See The SAP Note Number 554414:
    https://websmp130.sap-ag.de/sap(bD1lcyZjPTAwMQ==)/bc/bsp/spn/smb_searchnotes/display.htm?note_langu=S&note_numm=0000554414
    <b>User is unable to create new document</b>
    <i>Symptom</i>
    When the user tries to create a document the following error message appears: "Generating this document requires numbering to be determined for this document".
    <i>Other terms</i>
    Authorization, numbering, creating, documents, message, generate
    Reason and Prerequisites
    The user has not been authorized for series, and can therefore not
    generate new Marketing Document Numbers.
    <i>Solution</i>
    In order to remedy this problem, please perform the following steps:
    Note that the following steps can only be performed by a super user.
    Choose "Administration"
    Choose "Authorizations"
    Select the user from the list on the left hand side of the Authorizations table.
    From within the Authorisations window choose "Administration"
    Choose "System Initialization"
    Choose "Series"
    On the right hand side of the table, change the permission for "Series" from "No Authorization" to "Full Authorization".
    Click the "Update" button.

  • How do stop automatically logging in to another user's account?

    My computer connects to SBC Yahoo DSL via PPPoE. The SBC Yahoo DSL account and password are set (in Internet Connect) so that when you click on Safari, the computer is able to connect to the internet without having to type in the account name and password each time.
    The problem is, there are multiple users on my computer who have Yahoo (or some variation of Yahoo, such as SBC Yahoo! or My Yahoo!) as a homepage. When one logs off, and I log onto my Yahoo homepage, I find I am still logged into the account of the user who just logged off. How do I stop this from happening?

    Hi mhoesq,
    Thanks for clarifying the different identities.
    Now, when each of you go to different parts of Yahoo, do you have a similar setup as with Safari, that is, each has a Yahoo identity and password ( I presume this if it says welcome so and so) and have you checked an automatic log-in/ remember me sort of thing.
    If that is the case ( and here I'm guessing) then if each person does not log out of their Yahoo account but just closes Safari, then the next time someone else logs in, Yahoo will think it is the same person.
    Safari will remember a user's homepage, and Yahoo will remember who is logged in.
    So adding to the scenario that you have described, if User A actively logs out of their yahoo account and then closes Safari and logs out of the Mac, then I would imagine when User B logs in, fires up Safari and is automatically logged in to a new yahoo account then it should say Welcome User B.
    There are a lot of presumptions here, but this may be the explanation.
    regards, roam

  • Firefax hangs in remote desktop when another user logs in on the console

    When I work with remote desktop on a windows 7 pc I could always use firefox without any problem, even when someone else was logged in on the same windows 7 machine. Siince the update of firefox to version 13, ff hangs in the remote desktop session as soon as someone else logs in on the wndows 7 console.

    To be specific, this problem occurs in a multiple concurrent user configuration (=hack), where the RDC user and console users are simultaneous users. Firefox will hang, using 50% of the CPU. As soon as the RDC user walks over to the console and switches to that user the hang is released. The behavior is new to v13 and is highly reproducible.
    For more info on multiple concurrent users:
    [http://www.missingremote.com/guide/how-enable-concurrent-sessions-windows-7-service-pack-1-rtm http://www.missingremote.com/guide/how-enable-concurrent-sessions-windows-7-service-pack-1-rtm]

  • Can operations continue to run when logged in as another user?

    I've logged in as myself and I have set an operation to run, its going to run for a while and I would like the ability of my wife to log in. When you do this the operation pauses while logged in as her.
    Can it continue to run at the same time?

    Try logging into your user while holding down the shift key on your keyboard, to supress any startup items that may be interfering with your program.
    If that does not do it, look for a preference file in you user folder by choosing the Go menu from the Finder and selecting Go to Folder and enter ~/Library/Preferences and checking for files having to do with your application. If there are any, move them to your desktop and try again.
    If that does not fix it, move them back, replacing the new ones that will be built. Also, if your program uses any data files or libraries when started up, try removing those. Again, if not fixed, put them back.

  • Which log would show me user activity

    Specifically the use of SE16, which table was queried and which "query criteria" was entered for that particular table (eg. product code, customer number...etc)?

    You could hobble over to http://www.bsdnexus.com where we put together a thing, trying to list the advantages of each BSD.
    As Greg Lehey, author of, "The Complete FreeBSD," has stated, each system's main idea can be found in their slogan.
    FreeBSD (my personal favorite, so keep that in mind as you read).
    The Power to Serve is its slogan. It's probably the fastest on x86 at least, and has a wider collection of ports than any of the others.  It's probably the easiest of them to get working as a desktop, and is probably the most powerful as a server.  If you choose it, start with the 6.0, not the older versions. 
    Most things are compiled from source, which takes awhile.  (This is true for all of them, though there are often precompiled packages available). 
    I'm going to push my page http://home.nyc.rr.com/computertaijutsu/FreeBSD5x.html which has a few tips for Linux users. 
    (I'm writing this from a BSD box actually).
    NetBSD
    Slogan, Of course it runs NetBSD.  It's quite portable, though I think truth be told, last time I checked, Debian had more archs than Net.  Its portability results in a very clean code base.  Fewer packages, a bit slower than Free (imho).  It has its own quirks.
    (I'll push another page of mine, though it's aimed more at the FreeBSD user, http://home.nyc.rr.com/computertaijutsu/netbsd.html )
    OpenBSD is perhaps a bit harder to install and its slogan is something like only one security hole in 10 years.  Its emphasis is on security-it's probably the slowest, and may have the fewest number of ported applcations.   However, many people can and do use it as their desktop.

  • ORACLE Not Available - only when logged on as another user

    I can't figure out what I forgot. I installed everything (RH 6.1
    and standard) and can login as internal from user oracle no
    problems.
    When I login from a user I have granted dba to I get Error
    01034: ORACLE not Available. This is in sqlplus. I am sure it is
    something obvious as I had it working before my 5th reinstall.
    Thanks,
    Jon Griffin
    null

    Jon,
    Are you sure that the Database is started? You will get this
    error if it isn't.
    Chris
    Jon Griffin (guest) wrote:
    : I can't figure out what I forgot. I installed everything (RH
    6.1
    : and standard) and can login as internal from user oracle no
    : problems.
    : When I login from a user I have granted dba to I get Error
    : 01034: ORACLE not Available. This is in sqlplus. I am sure it
    is
    : something obvious as I had it working before my 5th reinstall.
    : Thanks,
    : Jon Griffin
    null

Maybe you are looking for

  • How can i create/install oracle 10 rac on my single windows machine

    can anyone help me to step by step install oracle 10g rac(rac environment) on my single window machine. if its not possible then y ? thxs

  • Removing characters from a String (concats, substrings, etc)

    This has got me pretty stumped. I'm creating a class which takes in a string and then returns the string without vowels and without even numbers. Vowels and even characters are considered "invalid." As an example: Input: "hello 123" Output: "hll 13"

  • Dreamweaver Template alignment Issue

    I am using Dreamweaver 8, i have created a template with my background image, my menu, and an outter table to align my content. I have entered new content in one of the pages that I have applied the template to, and now all of it is shifted to the ri

  • Checkbox - data sent to php

    Hi I'm trying to get checkbox data out of flash 8 and in to php thate they will be stored in a DB and sent as an e-mail. I'm interested in the selected data and ony their label. I tried to solve it but now i'm stucked. I'm trying to use loadvars to g

  • Looking for a way to directly choose keyboard layout.

    I'm looking for a way to organise separated keyboard keys combinations (or single keys - the best) for every keyboard layout. I want to be able to choose layout directly. One unique key (keys combination) for each layout. One way may be smth. like se