Event ID:
4778
Category:
Logon/Logoff
Subcategory:
Other Logon/Logoff Events
Supported on:
Windows Vista, Windows Server 2008
A session was reconnected to a Window Station.
Subject:
Account Name: %1
Account Domain: %2
Logon ID: %3
Session:
Session Name: %4
Additional Information:
Client Name: %5
Client Address: %6
This event is generated when a user reconnects to an existing Terminal Services session, or when a user switches to an existing desktop using Fast User Switching.