Check the Security log in Event Viewer. By default this is the only area that will tell you who has logged in when. There are two points to remember here:
1. Account logon auditing must be enabled for success and failure. This should be enabled at the domain level if your machine is on a domain. Otherwise, enable the auditing in the Local Security Policy in Administrative Tools......Local Security Policy.....Local Policies....Audit Policy. (or something like that). 2. The security log should be expanded in size in most cases depending on the usage of the machine. This can be controlled by group policy or manually by right clicking on Security Log in Event Viewer and selecting Properties. Cheers. -----Original Message----- From: Jose Guevarra [mailto:[EMAIL PROTECTED] Sent: Wednesday, 23 July 2003 4:03 AM To: [EMAIL PROTECTED] Subject: finding who has logged in on Win2k Pro Hi, We have possibly had some type of incident at our work place. I'd like to know if it is possible to check and see the "User Login" history on a Win2K pro machine. Is this history log enabled by default? What are some other ways? thanx, -Jose G.- --------------------------------------------------------------------------- ---------------------------------------------------------------------------- --------------------------------------------------------------------------- ----------------------------------------------------------------------------
