## Winlogon

Seen on:
* Windows 2000

<table border="1" class="docutils">
  <tbody>
    <tr>
      <td><b>Log type(s):</b></td>
      <td>Application</td>
    </tr>
    <tr>
      <td><b>Log source(s):</b></td>
      <td>Winlogon</td>
    </tr>
    <tr>
      <td><b>Event message file(s):</b></td>
      <td>%SystemRoot%\System32\sp3res.dll</td>
    </tr>
    <tr>
      <td>&nbsp;</td>
      <td>%SystemRoot%\System32\winlogon.exe</td>
    </tr>
  </tbody>
</table>

&nbsp;

Seen on:
* Windows XP 32-bit
* Windows 2003
* Windows XP 64-bit

<table border="1" class="docutils">
  <tbody>
    <tr>
      <td><b>Log type(s):</b></td>
      <td>Application</td>
    </tr>
    <tr>
      <td><b>Log source(s):</b></td>
      <td>Winlogon</td>
    </tr>
    <tr>
      <td><b>Event message file(s):</b></td>
      <td>%SystemRoot%\System32\winlogon.exe</td>
    </tr>
  </tbody>
</table>

&nbsp;