Log in and log off times from Windows XP

[Helmy]

I want to find out how to find the log in and log off times for the last
couple of days for all of the users on a stand alone laptop. I have tried to
find this under "Computer Management" which I have accessed from "Start /
Control Panel / Administrative Tools" but under "Event Viewer / Security"
from the "Computer Management" option I seem to see a load of "Success Audit"
info. from one day only (today 19.07.07) and no log in information from
yesterday (18.07.07) which is the actual info. I am looking for. Also, a lot
of the "Success Audit" info. I can see appears to be the same information
repeated over and over again. Please help, I have already spent around 3
hours trying to find this most straight forward information. I am so
frustrated with it.

 

[Roger Abell [MVP]]

What is in the security event log depends on what you have enabled
for auditing, and how much is there depends on how large the log is
allowed to become, the rate of event generation, and the behavior
when the maximum event log size is reached.

If you look at the oldest event in your log and is does not go back
far enough in time, then you will not be able to find events you are
after (max size and/or behavior on full need adjustment). If you are
not seeing event messages for things that did happen within the time
span that the log covers then you need to adjust what is being logged.

Roger

"Helmy" <Helmy@discussions.microsoft.com> wrote in message
news:EF45B4A1-3313-4633-B820-1A2A578334B6@microsoft.com...
>I want to find out how to find the log in and log off times for the last
> couple of days for all of the users on a stand alone laptop. I have tried
> to
> find this under "Computer Management" which I have accessed from "Start /
> Control Panel / Administrative Tools" but under "Event Viewer / Security"
> from the "Computer Management" option I seem to see a load of "Success
> Audit"
> info. from one day only (today 19.07.07) and no log in information from
> yesterday (18.07.07) which is the actual info. I am looking for. Also, a
> lot
> of the "Success Audit" info. I can see appears to be the same information
> repeated over and over again. Please help, I have already spent around 3
> hours trying to find this most straight forward information. I am so
> frustrated with it.
>
>
>
>

 

[James Matthews]

What is your policy? Is it possible that someone cleared the logs?

--

http://www.goldwatches.com/watches.asp?Brand=14
"Helmy" <Helmy@discussions.microsoft.com> wrote in message
news:EF45B4A1-3313-4633-B820-1A2A578334B6@microsoft.com...
>I want to find out how to find the log in and log off times for the last
> couple of days for all of the users on a stand alone laptop. I have tried
> to
> find this under "Computer Management" which I have accessed from "Start /
> Control Panel / Administrative Tools" but under "Event Viewer / Security"
> from the "Computer Management" option I seem to see a load of "Success
> Audit"
> info. from one day only (today 19.07.07) and no log in information from
> yesterday (18.07.07) which is the actual info. I am looking for. Also, a
> lot
> of the "Success Audit" info. I can see appears to be the same information
> repeated over and over again. Please help, I have already spent around 3
> hours trying to find this most straight forward information. I am so
> frustrated with it.
>
>
>
>