Which Event Viewer Log provides an audit of user log-on events?

The Security event log is specifically designed to record security-related events on a computer, including the auditing of user log-on events. When a user logs on or off from a system, those actions are logged within this category to maintain a record of who accessed the system and when. This capability is essential for maintaining security and ensuring proper monitoring of user activities.

While the Application log captures events related to software applications running on the system, the System event log documents system-level events like hardware failures and system services, and the Setup log records events related to the installation of applications or the operating system. These logs do not focus on user authentication or access events as the Security event log does. Thus, choosing the Security event log is crucial for effective auditing and investigation into user access and log-on activity.