Log in and log off times from Windows XP

[Guest Helmy]

I want to find out how to find the log in and log off times for the last

couple of days for all of the users on a stand alone laptop. I have tried to

find this under "Computer Management" which I have accessed from "Start /

Control Panel / Administrative Tools" but under "Event Viewer / Security"

from the "Computer Management" option I seem to see a load of "Success Audit"

info. from one day only (today 19.07.07) and no log in information from

yesterday (18.07.07) which is the actual info. I am looking for. Also, a lot

of the "Success Audit" info. I can see appears to be the same information

repeated over and over again. Please help, I have already spent around 3

hours trying to find this most straight forward information. I am so

frustrated with it.

[Guest Roger Abell [MVP]]

What is in the security event log depends on what you have enabled

for auditing, and how much is there depends on how large the log is

allowed to become, the rate of event generation, and the behavior

when the maximum event log size is reached.

 

If you look at the oldest event in your log and is does not go back

far enough in time, then you will not be able to find events you are

after (max size and/or behavior on full need adjustment). If you are

not seeing event messages for things that did happen within the time

span that the log covers then you need to adjust what is being logged.

 

Roger

 

"Helmy" <Helmy@discussions.microsoft.com> wrote in message

news:EF45B4A1-3313-4633-B820-1A2A578334B6@microsoft.com...

>I want to find out how to find the log in and log off times for the last

> couple of days for all of the users on a stand alone laptop. I have tried

> to

> find this under "Computer Management" which I have accessed from "Start /

> Control Panel / Administrative Tools" but under "Event Viewer / Security"

> from the "Computer Management" option I seem to see a load of "Success

> Audit"

> info. from one day only (today 19.07.07) and no log in information from

> yesterday (18.07.07) which is the actual info. I am looking for. Also, a

> lot

> of the "Success Audit" info. I can see appears to be the same information

> repeated over and over again. Please help, I have already spent around 3

> hours trying to find this most straight forward information. I am so

> frustrated with it.

>

>

>

>

[Guest James Matthews]

What is your policy? Is it possible that someone cleared the logs?

 

--

 

http://www.goldwatches.com/watches.asp?Brand=14

"Helmy" <Helmy@discussions.microsoft.com> wrote in message

news:EF45B4A1-3313-4633-B820-1A2A578334B6@microsoft.com...

>I want to find out how to find the log in and log off times for the last

> couple of days for all of the users on a stand alone laptop. I have tried

> to

> find this under "Computer Management" which I have accessed from "Start /

> Control Panel / Administrative Tools" but under "Event Viewer / Security"

> from the "Computer Management" option I seem to see a load of "Success

> Audit"

> info. from one day only (today 19.07.07) and no log in information from

> yesterday (18.07.07) which is the actual info. I am looking for. Also, a

> lot

> of the "Success Audit" info. I can see appears to be the same information

> repeated over and over again. Please help, I have already spent around 3

> hours trying to find this most straight forward information. I am so

> frustrated with it.

>

>

>

>