Windows SecurityAuthentication

Event 4800: The workstation was locked.

The workstation was locked.

Technical Details

Windows Security Source

Event ID: 4800

Windows Security- Authentication

Event Description

The workstation was locked.

Key Log Fields

  • TargetUserName - Account that locked the workstation
  • TargetDomainName - Domain of the account
  • TargetLogonId - Logon ID for correlation
  • SessionId - Session ID of the locked session

Contents