+ Post New Thread
Results 1 to 7 of 7
How do you do....it? Thread, Need to see who logged onto a machine in Technical; I need to find out who was logged onto a particular machine over the weekend period. I thought that this ...
  1. #1

    Join Date
    Mar 2008
    Location
    Guildford
    Posts
    73
    Thank Post
    3
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Need to see who logged onto a machine

    I need to find out who was logged onto a particular machine over the weekend period.

    I thought that this information would be available on the security log of that machine, but it is not, all that is there is a Success Audit dated 27th April 2007.

    Is there another way to find this out through either the local machine or the server?

  2. #2

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,802
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224
    Look at the modification times of the cached user profiles.

  3. #3
    richard.thomas's Avatar
    Join Date
    Sep 2007
    Posts
    491
    Thank Post
    5
    Thanked 11 Times in 10 Posts
    Rep Power
    16
    Theres a few scripts that people have made. Have a look in the scipts section of the forum.
    There is a log in the event viewer on the machine, but it is a bugger to dig out. I'm currently in the process of making a full SQL database driven web GUI to track logins... Taking abit longer than I wanted so it can't help you here i'm affraid

  4. #4

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    15,816
    Thank Post
    873
    Thanked 1,675 Times in 1,458 Posts
    Blog Entries
    12
    Rep Power
    444
    I don’t think that will help in this case as he wanted to see who was logged on in the past.

  5. #5

    Join Date
    Nov 2007
    Location
    Rotherham
    Posts
    1,675
    Thank Post
    122
    Thanked 126 Times in 102 Posts
    Rep Power
    45
    If you've got local profiles on the machine then do a search for "NTUSER.dat" (It's hidden, and not NTUSER.DAT.Log) in documents and settings.
    It will tell you the last time a user logged out of that machine.

  6. #6

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,802
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224
    Also if you use folder redirection, check the application log for eventids that apply to that. It will mention the user name.

  7. #7
    richard.thomas's Avatar
    Join Date
    Sep 2007
    Posts
    491
    Thank Post
    5
    Thanked 11 Times in 10 Posts
    Rep Power
    16
    Ah my bad. I didn't read that properly (sorry!!). You should be able to find this information in the event viewer. If you look through to that date in application you'll prob find a few entries that have the username. It may not show the actual login, but you should be able to determine who was using the computer.

SHARE:
+ Post New Thread

Similar Threads

  1. How to find out which machine a student logged onto, & when
    By indiegirl in forum How do you do....it?
    Replies: 32
    Last Post: 16th March 2012, 01:17 PM
  2. Who is (logged) on..
    By PiqueABoo in forum Scripts
    Replies: 5
    Last Post: 5th August 2007, 12:06 PM
  3. Logged on
    By kevin_lane in forum Scripts
    Replies: 18
    Last Post: 6th June 2007, 04:33 PM
  4. Who last logged on
    By danIT in forum Windows
    Replies: 1
    Last Post: 2nd October 2006, 09:08 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •