Guest asus61 Posted March 17, 2008 Share Posted March 17, 2008 i have neccesity to search a history of login (from today to 10 days old) into computer from my domain users. what are the file or .log or event logs for find it ??? Quote Link to comment Share on other sites More sharing options...
Guest VanguardLH Posted March 17, 2008 Share Posted March 17, 2008 "asus61" <asus61@discussions.microsoft.com> wrote in message news:D1DF34B3-8F8A-4F60-9426-5F0310FF4E0D@microsoft.com...<span style="color:blue"> >i have neccesity to search a history of login (from today to 10 days >old) > into computer from my domain users. > what are the file or .log or event logs for find it ???</span> Go into the security policy editor (secpol.msc) or group policy editor (gpedit.msc), depending on whether or not you are logging in under a domain, and check what auditing functions you have enabled. One of those policies is to track logon/logoff events (which get recorded in the Event Viewer logs). For secpol.msc: Security Settings -> Local Policies -> Audit Policy For gpedit.msc: Local Computer Policy -> Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> Audit Policy Of course, I you didn't have auditing enabled for the past 10 days then you can't see those unlogged events over those last 10 days. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.