Re: "Last logged on" messages unavailable

From: Eric Fitzgerald [MSFT] (ericf_at_online.microsoft.com)
Date: 05/14/03 

Date: Wed, 14 May 2003 10:16:29 -0700

We are investigating whether it is feasible to add a "your account was last
used for logon at ..." dialog to the next release of Windows. This is
actually a very complex task in a domain environment, because the DC you're
talking to only knows the last time that it logged you on; other DCs might
have logged you on more recently.

Eric 

-- 
Eric Fitzgerald
Program Manager, Windows Auditing and Intrusion Detection
Microsoft Corporation
This posting is provided "AS IS" with no warranties, and confers no rights.
"Steven L Umbach" <n9rou@attbi.com> wrote in message
news:gHtwa.880894$S_4.900496@rwcrnsc53...
>       You could enable account log on and log on events auditing for
> computer/domain and view events in security log of event viewer. .
Depending
> on if you are talking about a single computer or a domain it could be from
> easy to difficult to find the info. You could use something like eventcomb
> to make it easier to search the event logs of multiple computers. If you
> suspect someone is using your account, then change your password and look
> for failed log on attempts with your account.  --- Steve
>
> http://www.ntsecurity.net/Articles/Index.cfm?ArticleID=9633
>
> "Tuukka K" <tuukka.koskenrouta@tukkk.fi> wrote in message
> news:08ea01c319d9$72aa0ad0$a101280a@phx.gbl...
> > Hi,
> > I asked about the matter few days ago. My message and
> > replies are unavailable. Could you please answer again.
> > My question was. How do I see when my username was used
> > last time for logging on the system. Is it possible to
> > have notice about it when logging in.
>
>

Relevant Pages