Event Message:

User Logoff: User Name: user name Domain: name Logon ID: name Logon Type: parameter

Source

Event Log

Event ID

Event Type

Security

Security

538

Success Audit

Explanation:

This event record indicates that a user has logged off.