Windows 11 Windows 11 Missing Security Log Event IDs 4802 and 4803? This a bug, feature, or maybe events removed from Windows 11?

[Jibunnokage]

Windows 11 OS install clean, about 2 months ago. Fully updated as of this posting. This issue did not occur on Windows 10 or previous versions of Windows on same hardware. This is not a hardware issue. This issue has now happened on multiple instances of Windows 11 either upgraded from Windows 10 or new installation of Windows 11.Providing the correct AD or local security policy is set, the family of 4800 Event IDs should be published to the security event log. This includes 4800 (lock workstation), 4801 (unlock workstation), and 4802 (invoke screen saver) and 4803 (dismiss screen saver).

Continue reading...