But I do tend to check what's in the Event Viewer to see if any clues were left behind on the log off.