Explain the difference between logon events and account logon events.
A logon event records access to a computer’s resource. An account logon event records an authentication event. Logon events are in the 4600 series (Server 2008) or 500 series (Server 2003), and account logon events are in the 4700 series (Server 2008) or 600 series (Server 2003). Logon events are stored on the computer whose resource was accessed, and account logon events are stored on the computer that performed the authorized authentication of the account.
Master It List the common account logon and logon events that you should memorize to enhance the efficiency of your log analysis.
Solution Logon events: