logs og logon

A

asus61

i have neccesity to search a history of login (from today to 10 days old)
into computer from my domain users.
what are the file or .log or event logs for find it ???
 
V

VanguardLH

"asus61" <asus61@discussions.microsoft.com> wrote in message
news:D1DF34B3-8F8A-4F60-9426-5F0310FF4E0D@microsoft.com...
>i have neccesity to search a history of login (from today to 10 days
>old)
> into computer from my domain users.
> what are the file or .log or event logs for find it ???



Go into the security policy editor (secpol.msc) or group policy editor
(gpedit.msc), depending on whether or not you are logging in under a
domain, and check what auditing functions you have enabled. One of
those policies is to track logon/logoff events (which get recorded in
the Event Viewer logs).

For secpol.msc:
Security Settings -> Local Policies -> Audit Policy

For gpedit.msc:
Local Computer Policy -> Computer Configuration -> Windows Settings ->
Security Settings -> Local Policies -> Audit Policy

Of course, I you didn't have auditing enabled for the past 10 days
then you can't see those unlogged events over those last 10 days.
 
Back
Top Bottom