There are many users who has been more than one logging ID into computer. And sometime you want to know that who has logged into your machine besides you. So Webchetna helps you to find your answer. Simply you can enable logon auditing to have window track which user accounts log in and when. The Audit logon events setting tracks both local logins and network logins. Each logon event specifies the user account that logged on and the time the login took place. And you can also see when users logged off. So ready to find when users logged in & off into your computer. Just follow these simple steps :
Then go to Local Computer Policy > Computer Configuration > Window Settings > Security Settings > Local Policies > Audi Policy.
After that double-click the Audit logon events policy setting in the right pane to adjust its options. In the properties window, enable the success checkbox to log successful logons. And you also enable the Failure checkbox to log failed logins.
After enabling this setting, Window will log logon events (including a username and time) to the system security log.
If you want to view these events, open the Event Viewer then press the window key, type Event Viewer and press Enter to open it.
Then go to Window Logs > Security category in the event viewer. And look for the events with ID 4624, these represent successful login events.
If you want to see more information such as the user account that logged into the computer, then you double click the event and scroll down in the text box. You can also scroll down in the text box underneath the list of events.
After that if your security log is cluttered, you can click the Filter Current Log option in the sidebar and filter by event ID 4624. The Event Viewer will display only logon events.
And with this simple process you will find the person who logged into computer. Hope it help you, Thanks.
0 comments:
Speak up your mind
Tell us what you're thinking... !