Windows 10: Windows 11 Security Audit Log Event 4802 screensaver invoked not working

Hi! I upgraded to windows 11 a few days ago & I'm trying to create a task via scheduler that runs automatically when event 4802 the screensaver is invoked via timeout occurs in the Windows security audit log. https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-10/security/threat-protection/auditing/event-4802My filter:<QueryList> <Query Id="0" Path="Security"> <Select Path="Security">*[System[Level=4 or Level=0 and EventID=4802]]</Select> </Query></Q

:)

 

Windows 10 - Manually invoked Screen Saver and Events 4802, 4803

Google is a wonderful tool. Asking for

screensaver command line

will (amongst other things) give you this instant suggestion:

scrnsave.scr /s

Your condescension and unnecessary paraphrasing of my question just goes to show that you didn't read it. I'm fully aware of how to manually invoke a screen saver. I'm interested in getting a manually invoked screensaver to properly log events when invoked
and dismissed. Try again, if you like.

 

Windows 10 - Manually invoked Screen Saver and Events 4802, 4803

Hello!

I am working on scheduling a task based on event 4803, but I have come to the understanding that it is only created when the Screen Saver is invoked by timeout rather than manually running a .scr file. Is this by design? Is there a way to manually invoke
the screensaver and have it create the 4803 event when it is dismissed?

Thanks,

Mike

 

Windows 10 - Manually invoked Screen Saver and Events 4802, 4803

Google is a wonderful tool. Asking for

screensaver command line

will (amongst other things) give you this instant suggestion:

scrnsave.scr /s