From 641e10afd84a7d75bed4e7788f54f2e0e6951e74 Mon Sep 17 00:00:00 2001
From: allebonvi <allebonvi@gmail.com>
Date: Thu, 2 Jul 2026 12:48:44 +0200
Subject: [PATCH] Usa evento Winlogon per backup al logoff

---
 tasks/BakRestBackupOnLogoff.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tasks/BakRestBackupOnLogoff.xml b/tasks/BakRestBackupOnLogoff.xml
index 976a4cc..37711d0 100644
--- a/tasks/BakRestBackupOnLogoff.xml
+++ b/tasks/BakRestBackupOnLogoff.xml
@@ -7,7 +7,7 @@
   <Triggers>
     <EventTrigger>
       <Enabled>true</Enabled>
-      <Subscription>&lt;QueryList&gt;&lt;Query Id="0" Path="Security"&gt;&lt;Select Path="Security"&gt;*[System[(EventID=4647)]]&lt;/Select&gt;&lt;/Query&gt;&lt;/QueryList&gt;</Subscription>
+      <Subscription>&lt;QueryList&gt;&lt;Query Id="0" Path="System"&gt;&lt;Select Path="System"&gt;*[System[Provider[@Name='Microsoft-Windows-Winlogon'] and EventID=7002]]&lt;/Select&gt;&lt;/Query&gt;&lt;/QueryList&gt;</Subscription>
     </EventTrigger>
   </Triggers>
   <Principals>