General discussion


538 events not logged on Win2K Pro

By dharwell ·
Greetings. I am setting up stand alone workstations for a secure government area. There is a security requirement for these systems to log an event code 538 upon user logoff. To date, I have applied two seperate Microsoft hot fixes, neither of which resolved the issue. My question is, is there any way to force this event to log. Keep in mind that the audit policies have already been configured to log this event type.

This conversation is currently closed to new comments.

Thread display: Collapse - | Expand +

All Comments

Collapse -

by sgt_shultz In reply to 538 events not logged on ...

what have you tried, dear? besides the hotfixes, and which were those?
do you have the system configured to log successful events?
did you look at all the articles about this at

Collapse -

by dharwell In reply to 538 events not logged on ...

In response, there are two hotfixes available from Microsoft, both of which have been applied. I have been researching this with Microsoft support for 3 days now. Audit policies are set to log both successes and failures.

Related Discussions

Related Forums