Event ID 4002 — Windows Logon Availability

Applies To: Windows Server 2008 R2

Windows logon availability determines whether the Windows logon process is able to be completed successfully. The logon process is the interface between the account for a user, process, or service and the computer that establishes authenticated credentials for the account and allocates the appropriate system and network resources. Windows logon manages the use of the secure attention key (CTRL-ALT-DELETE) to initiate the login screen, load the user profile on logon, and lock the computer.

Event Details

Product: Windows Operating System
ID: 4002
Source: Microsoft-Windows-Winlogon
Version: 6.1
Message: The logon hours restriction policy is applied to the logged on user. The user's session has been locked, disconnected or logged off depending on the policy setting. User Name: %1 Domain Name: %2


This is a normal condition. No further action is required.

Windows Logon Availability

Core Security