http://msmvps.com/blogs/bradley/archive/2007/12/02/logon-type-10.aspxReading &quot;how&quot; they come in is sometimes a little tricky... When someone authenticates via RWW, you don&#39;t see them coming in via a logon as a &quot;10&quot; http://www.windowsecurity.com/articles/Logon-Types.html rather it&#39;s a &quot;3&quot;enCommunityServer 2008.5 SP2 (Build: 40407.4157)http://msmvps.com/blogs/bradley/archive/2007/12/02/logon-type-10.aspx#1378093Tue, 04 Dec 2007 14:13:42 GMTd67277c4-116b-43f1-b688-e9ef184ea916:1378093Amy<p>I would also suggest using those cool new event log features to segregate out the 3,8 and 10 login types so you can find them easier when reviewing the logs.</p> <div style="clear:both;"></div><img src="http://msmvps.com/aggbug.aspx?PostID=1378093" width="1" height="1">http://msmvps.com/blogs/bradley/archive/2007/12/02/logon-type-10.aspx#1376193Sun, 02 Dec 2007 22:14:13 GMTd67277c4-116b-43f1-b688-e9ef184ea916:1376193Scorpion Software Corporate Weblog<p>Susan Bradley blogged about how she uses RWW-Guard to monitor who is logging in via Remote Web Workplace (RWW) on SBS 2003. I love seeing comments like this, as it shows real world usage of our products in the field in a way that solves real pain points</p> <img src="http://msmvps.com/aggbug.aspx?PostID=1376193" width="1" height="1">