locked
How I can know user who has loggedon in my computer ? RRS feed

  • Question

  •  

    I'm using windows vista 32 and I've defined 3 users in my computer.

    I'd like to know wich user has logged on/out in last period (a week, a month,..), date and time.

    Were can I find this type of informations?

    Many thanks in advance

    Regards

    Raf

    Saturday, October 25, 2008 1:24 PM

Answers

  • Raf

     

    This information is logged in the Event Viewer.

     

    Open Control Panel, select Classic View on the left side menu. Double click Administrative Tools and double click Event Viewer.

     

    In the Event Viewer, expand Windows Logs and select Security.

     

    There is a lot of information in this log. The easiest way to see the Log On/Log Off events is to first save the log as a text file.

     

    Right click Security and select 'Save Events As...'

    In the Save As dialog box, select Text in the Save As Type menu.

    Type a name for the file and save it to the desktop or one of your User folders.

     

    Open the file from where you saved it.

     

    The Log On events are,   Event ID:      4624

    The Log Off events are,   Event ID:      4634

     

    You can use the 'Find' function in your text editor to pinpoint these events..

     

    The log on event will have the following information.

     

    Log Name:      Security
    Source:        Microsoft-Windows-Security-Auditing
    Date:          10/25/2008 7:49:58 PM
    Event ID:      4624
    Task Category: Logon
    Level:         Information
    Keywords:      Audit Success
    User:          N/A
    Computer:      xxx-xx
    Description:
    An account was successfully logged on.

    Subject:
     Security ID:  SYSTEM
     Account Name:  xxx
     Account Domain:  WORKGROUP
     Logon ID:  xxxxx

     

    The log off event will have this information.

     

    Log Name:      Security
    Source:        Microsoft-Windows-Security-Auditing
    Date:          10/25/2008 7:50:10 PM
    Event ID:      4634
    Task Category: Logoff
    Level:         Information
    Keywords:      Audit Success
    User:          N/A
    Computer:      xxx-xx
    Description:
    An account was logged off.

    Subject:
     Security ID:  xxx-xx\Standard
     Account Name:  Standard
     Account Domain:  xxx-xx
     Logon ID:  xxxxxxxx

     

    After you save this log, it would be a good idea to Select Action / Clear Log on the toolbar. This will keep the files down to a manageable size.

     

     

    Hope this helps.


    If this post helps to resolve your issue, click the Mark as Answer button at the top of this message.


    Ronnie Vernon
    Microsoft MVP
    Windows Desktop Experience

    Sunday, October 26, 2008 3:32 AM
    Moderator