This question already has an answer here: Note 3 tv ad song download youtube.
[HKEY_LOCAL_MACHINE SOFTWARE Microsoft Windows NT CurrentVersion Winlogon] 'GpNetworkStartTimeoutPolicyValue'=dword:00000078. When the computer first start I see it attempt to install but then it quickly gos to the logon screen. If I check the event log I see the following. Event ID: 301 The.
- In Windows 7, How to query times, when the computer was locked? 3 answers

Is it possible to track the event when a user manually locked the station (by pressing Windows + L) in event viewer or in the registry?
I am using Windows 7 Home Premium 64 bit.
ᔕᖺᘎᕊ

marked as duplicate by Ƭᴇcʜιᴇ007, Shog9♦Jul 17 '14 at 1:26
This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.
1 Answer
you will have to do some experimentation to determine the exact footprint based on your network configuration (ad/kreberos vs sam, automatic locking with screensaver, etc), but look for event log id 4800 to indicate locking, and 4801/4803/4624 for unlock/logon.
Mpre info here: http://technet.microsoft.com/en-us/library/dd772658%28v=WS.10%29.aspx
Frank ThomasFrank Thomas