GFI ESM GFI ESM

Event ID: Event Source:

Event ID 540 Source Security

Event ID540
SourceSecurity
TypeSuccess Audit
DescriptionSuccessful Network Logon:
    User Name: <user name>
    Domain: <domain name>
    Logon ID: <logon id>
    Logon Type: <logon type>
    Logon Process: <logon process>
    Authentication Package: <authentication package>
    Workstation Name: <computer name>

or

Successful Network Logon:
    User Name: <user name>
    Domain: <domain name>
    Logon ID: (0x0,0x43F6E)
    Logon Type: 3
    Logon Process: <logon process>
    Authentication Package: <authentication package>

    Workstation Name:
        Logon GUID: {107e155b-e3f6-0532-996a-c0e40ed3e5f5}
        Caller User Name: -
        Caller Domain: -
        Caller Logon ID: -
        Caller Process ID: -
        Transited Services: -
        Source Network Address: <workstation ip address>
        Source Port: <port number>
Comments and links for event id 540 from source Security
 
Contribute
If you have details about an event with id 540 that is not listed in our database, please, send it to us. The submitted event will be forwarded to our consultants for analysis. We recommend you to check the EventID.Net Processing Queue to see if the event was already been submitted by another contributor.