How to Read Logoff and Sign Out Logs in Event Viewer in Windows

How to Read Logoff and Sign Out Logs in Event Viewer in Windows

When a user logs off (sign out) of Windows, all of the apps you were using are closed, but the PC isn't turned off. Another person can log in (sign in) without needing to restart the PC.

You can use Event Viewer to view the date, time, and user details of all logoff events caused by a user initiated logoff (sign out).

This tutorial will show you how to view the date, time, and user details of all user initiated logoff and sign out event logs in Windows 7, Windows 8, and Windows 10.



Here's How:

1 Press the Win + R keys to open Run, type eventvwr.msc into Run, and click/tap on OK to open Event Viewer.

2 In the left pane of Event Viewer, open Windows Logs and System, right click or press and hold on System, and click/tap on Filter Current Log. (see screenshot below)

If you have already filtered this log, click/tap on Clear Filter first and then click/tap on Filter Current Log to start over fresh.

3 Enter the 4647 event ID into the <All Event IDs> field, and click/tap on OK. (see screenshot below)

4 You can now view the details of User-initiated logoff event logs. (see screenshot below)

5 When finished viewing log details, you can close Event Viewer if you like.

Thanks for Reading...

Masud Rana