#event-id-4647

1 article

Windows Events1

Windows Security Event Viewer displaying Event ID 4647 user logoff events on a security monitoring dashboard

Event 4647

Microsoft-Windows-Security-Auditing

Windows EventInformation

Windows Event ID 4647 – Microsoft-Windows-Security-Auditing: User Initiated Logoff

Event ID 4647 records when a user initiates a logoff from a Windows session. This security audit event tracks user-initiated disconnections for compliance and security monitoring purposes.

March 189 min