Since upgrading our servers to Windows Server 2003 and our workstations to Windows XP, we've noticed a new logon type in the Security log for event ID 528 (Successful Logon). What does logon type 10 mean?
Logon type 10 refers to remote interactive logons. Event ID 528 with logon type 10 means that the user logged on to the computer through RDP by using either Remote Desktop or Windows 2000 Server Terminal Services. Table 1 summarizes all logon types.