New
#11
The overnight logoff should have created an event, too. That may help give you a clue. Or are you saying that you have examined the logoff event and that it tells you nothing...
Can you correlate the time the logoff occurs to anything? Does it happen at the same time each night? Random time?