| Event Id | 682 |
| Source | Security |
| Description | Session reconnected to winstation:
User Name: <User Name>      
Domain: <Domain>      
Logon ID: <Logon ID>      
Session Name: <Session Name>      
Client Name: <Client Name>      
Client Address: <Client Address>     
|
| Event Information | According to Microsoft : Cause : A user reconnected to a disconnected terminal server session, or an administrator opened or reestablished the connection to the remote computer. This message is logged for informational purposes only. Resolution : No user action is required. |
| Reference Links | Event ID 682 from Source Security
Alternate Event ID in Vista and Windows Server 2008 is 4778.
|