Thursday, October 22, 2015

Finding past logins / How to see when someone logged on

I was recently tasked with finding computer login times for multiple users.
The internet seemed to make it a daunting task, talking about needing to have things setup before hand to track.
Here's what I did:
I opened Event Viewer on my computer.
Right Click Event Viewer on the tree and select Connect to Another Computer
https://technet.microsoft.com/en-us/library/cc766438.aspx?f=255&MSPPError=-2147217396
Expand Windows Logs
Select Security logs
Filter Current Log for Event ID 4648
4624 is also a logon event, but there's way more of them.  4648 is less frequent, and coincided with first logon.

No comments:

Post a Comment

Samsung refrigerator not making ice

How I got my stupid fridge to work again. Normally, I press/hold the blue button till it chimes. Well that didn’t work this time. Darn. I re...