Hi all, sorry if it is duplicate question or in wrong forum, I was unable to find it anywhere. Problem description: OS: Windows 7 Professional (from MSDNAA, RTM version I think) I would like to start a job when I lock my computer (e.g. run a batch to close all instant messengers). I found that the event ID is 4800 and its source is Microsoft-Windows-Security-Auditing. (http://blogs.msdn.com/ericfitz/archive/2008/08/20/tracking-user-logon-activity-using-logon-events.aspx) However, when I tried to set it up in scheduler, there wasn't such source (or I looked wrong). How should I set it? I am lost in all sources and stuff. I found only 'Log: Microsoft-Windows-Security-Configuration-Client/Operational ' and source: Security-Audit-Configuration-Client' and in that configuration it is not working. Thanks lukas

In the task scheduler under triggers use the pulldown menu to select "on work station lock".

Thanks, I am really blind :(