How do I check when a certain user logged on?

From: DJ (anonymous_at_discussions.microsoft.com)
Date: 11/10/03


Date: Mon, 10 Nov 2003 11:31:39 -0800

You need to audit user logon events. Configure this for
certian users or all users. Once this is setup, you will
be able to find a log on this information under the event
viewer, security log.

D.J.

>-----Original Message-----
>I need to find out if a certain user has been loggin on
>within certain time periods but I have no idea where to
>look. This is on Win2KServer SP4 with Win2k/XP clients.
>
>I've checked the security tab of the event log but there
>are no entries at all. Any help would be greatly
>appreciated.
>
>Thanks
>.
>



Relevant Pages

  • how to allow a user access to our server event logs?
    ... We want to setup a user on our domain with access to our Windows Server 2003 event logs, specifically the security log. ...
    (microsoft.public.windows.server.general)
  • Re: How to validate User ID creation date in Windows XP
    ... You could query the Security Log but you will only get the information if the log was setup to record events 624 and providing that the log wasn't purged or overwritten: ...
    (microsoft.public.windowsxp.general)
  • Event viewer - plugin
    ... we have several DCs and GPO is setup to save all log on and log off actions ... Instead checking all security log in Event ... I'd like to use any useful software (like SCOM or any other GUI ... plugin) which could sort out security event viewer and tell me like "user ...
    (microsoft.public.windows.server.general)
  • Event viewer - plugin
    ... we have several DCs and GPO is setup to save all log on and log off actions ... Instead checking all security log in Event ... I'd like to use any useful software (like SCOM or any other GUI ... plugin) which could sort out security event viewer and tell me like "user ...
    (microsoft.public.windows.server.general)
  • Audit Policy (security logs)
    ... Hey guys im trying to implement audit policy in our network and im trying to ... i setup a certain folder to be audited and i tried to create a file, ... move a files and check the security log events. ...
    (microsoft.public.windows.server.security)