logoff.exe

  • File Path: C:\windows\system32\logoff.exe
  • Description: Session Logoff Utility

Hashes

Type Hash
MD5 B8D1105A898B94F01EAFCE98E9C6F9D0
SHA1 8220FEF52FCE60AFC1F5713F01DE150FFD4FED2A
SHA256 16047E4459719867B6CC25BEF0B38F21B3C2F885FF4D37B6B9AEDE9ED65A3A9B
SHA384 F18E69964E5ED5606A39CB80FC4F94B250D3E5AED7E025D5E9DD279622022A4F3B0FB5000981B4CFB1E4E128ECC4E277
SHA512 E6F7E14E129CF13E6628FAACA026C7FEB9F8214E22C8349FDAC568D78C14B75CDF322498163FE35525EBC8C2256C80B5EDFE0722A52839869FBDE37EB872385B
SSDEEP 384:lty3EMBbRl9/vUE7TIs7hRy8QEa55IOmaYHoCWdYHE3EoI9oQeeOWSW3CuW:ltyltRv0wXV2BmaYheUdZOWO

Signature

  • Status: The file C:\windows\system32\logoff.exe is not digitally signed. You cannot run this script on the current system. For more information about running scripts and setting execution policy, see about_Execution_Policies at http://go.microsoft.com/fwlink/?LinkID=135170
  • Serial: ``
  • Thumbprint: ``
  • Issuer:
  • Subject:

File Metadata

  • Original Filename: logoff.exe.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 6.3.9600.16384 (winblue_rtm.130821-1623)
  • Product Version: 6.3.9600.16384
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.

File Similarity (ssdeep match)

File Score
C:\windows\system32\tsdiscon.exe 35

Additional Info*

*The information below is copied from MicrosoftDocs, which is maintained by Microsoft. Available under CC BY 4.0 license.


logoff

Applies to: Windows Server 2022, Windows Server 2019, Windows Server 2016, Windows Server 2012 R2, Windows Server 2012

Logs off a user from a session on a Remote Desktop Session Host server and deletes the session.

Syntax

logoff [<sessionname> | <sessionID>] [/server:<servername>] [/v]

Parameters

Parameter Description
<sessionname> Specifies the name of the session. This must be an active session.
<sessionID> Specifies the numeric ID which identifies the session to the server.
/server:<servername> Specifies the Remote Desktop Session Host server that contains the session whose user you want to log off. If unspecified, the server on which you are currently active is used.
/v Displays information about the actions being performed.
/? Displays help at the command prompt.
Remarks
  • You can always log off yourself from the session to which you are currently logged on. You must, however, have Full Control permission to log off users from other sessions.

  • Logging off a user from a session without warning can result in loss of data at the user’s session. You should send a message to the user by using the msg command to warn the user before taking this action.

  • If <sessionID> or <sessionname> isn’t specified, logoff logs the user off from the current session.

  • After you log off a user, all processes end and the session is deleted from the server.

  • You can’t log off a user from the console session.

Examples

To log off a user from the current session, type:

logoff

To log off a user from a session by using the session’s ID, for example session 12, type:

logoff 12

To log off a user from a session by using the name of the session and server, for example session TERM04 on Server1, type:

logoff TERM04 /server:Server1

Additional References


MIT License. Copyright (c) 2020-2021 Strontic.