+ Post New Thread
Results 1 to 9 of 9
Network and Classroom Management Thread, Login History in Technical; I am after a set of login histroy to find out what user has defaced laptop keyboard What the easyest ...
  1. #1

    Join Date
    Jul 2009
    Location
    Wolverhampton
    Posts
    116
    Thank Post
    6
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Login History

    I am after a set of login histroy to find out what user has defaced laptop keyboard

    What the easyest way to track this??

    Is there anywhere that stores what user has logged in on what machine??

    I have the name of the machines but i need to find the users who logged in

    Thanks

    Fil

  2. #2

    Join Date
    Jan 2008
    Location
    Hampshire
    Posts
    38
    Thank Post
    3
    Thanked 3 Times in 2 Posts
    Rep Power
    13

    RE: Login History

    Hi Fil,

    If you go to the Event Viewer, in Computer Manager and select Security you should be able to view who has logged on to and off the machine.

    Hope this helps,

    Maximus R

  3. #3

    Join Date
    Jul 2009
    Location
    Wolverhampton
    Posts
    116
    Thank Post
    6
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Quote Originally Posted by MaximusR View Post
    Hi Fil,

    If you go to the Event Viewer, in Computer Manager and select Security you should be able to view who has logged on to and off the machine.

    Hope this helps,

    Maximus R

    hi Maximus

    I have checked the 2 machines but there is only one entry going back to 2007

    any other places?? servers or anything?

    tar

    Phil

  4. #4
    actech's Avatar
    Join Date
    Mar 2008
    Location
    Australia
    Posts
    197
    Thank Post
    49
    Thanked 19 Times in 16 Posts
    Rep Power
    16
    This is of no comfort to you now but I recommend that you use a script to record who logs and where. The thread linked below details a script that I am now using and have caught a few kids out now

    Record Logon

  5. #5


    Join Date
    Jul 2007
    Location
    Rural heck
    Posts
    2,662
    Thank Post
    120
    Thanked 434 Times in 353 Posts
    Rep Power
    125
    Have a look in c:\documents and settings for cached profiles. You might find the last modfied date of one of the files will give you a clue.

    It you have a printer setup you might also want to have a look on your print server since if they printed anything.

    For future reference you might want to add something along the lines of "echo %USERNAME% %TIME% %DATE% >> [some secret location]\%computername%.txt" to your logon script.

    Also get papercut logger (it's free) and will log all print jobs.

  6. #6


    Join Date
    Mar 2009
    Location
    Leeds
    Posts
    6,210
    Thank Post
    218
    Thanked 812 Times in 694 Posts
    Rep Power
    274
    Quote Originally Posted by K.C.Leblanc View Post
    Have a look in c:\documents and settings for cached profiles. You might find the last modfied date of one of the files will give you a clue.

    It you have a printer setup you might also want to have a look on your print server since if they printed anything.

    For future reference you might want to add something along the lines of "echo %USERNAME% %TIME% %DATE% >> [some secret location]\%computername%.txt" to your logon script.

    Also get papercut logger (it's free) and will log all print jobs.
    i tend to use a slightly different script as i find that some pcs for no obvious reason log time with fractions of a second and some dont making the data a swine to compare in excel later so i add a mytime variable and dump that instead

    Code:
    echo -------Log user access to Machine-------
    set mytime=%TIME:~0,-3%
    echo %username%,%computername%,%mytime%,%date% >> \\server\userlog$\userlog.txt

  7. #7

    SpuffMonkey's Avatar
    Join Date
    Jul 2005
    Posts
    2,192
    Thank Post
    53
    Thanked 270 Times in 178 Posts
    Rep Power
    131
    Our script dumps to a database - with a nice little web based query front end - makes searching this stuff down nice & easy

  8. #8

    Join Date
    Jul 2009
    Location
    Wolverhampton
    Posts
    116
    Thank Post
    6
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    looked in docs and settings - profiles are couple days out

    Will need to look at setting something up

    Thanks

  9. #9

    Join Date
    Jan 2008
    Location
    Hampshire
    Posts
    38
    Thank Post
    3
    Thanked 3 Times in 2 Posts
    Rep Power
    13
    Hi Phil,
    If the laptop is connected to wireless you may have a wireless access log somewhere? Access Point, RADIUS server etc. Or you could look at the event viewer on the domain controller?

    Maximus R

SHARE:
+ Post New Thread

Similar Threads

  1. Internet History.
    By Daleus in forum Windows
    Replies: 7
    Last Post: 2nd December 2008, 02:55 PM
  2. CommandReporter - History of Changes?
    By DaveS in forum MIS Systems
    Replies: 5
    Last Post: 27th February 2008, 11:44 AM
  3. audit of Users history login history
    By Scotmk in forum Wireless Networks
    Replies: 7
    Last Post: 31st January 2008, 05:50 PM
  4. how to clear history
    By callumtuckey in forum Windows
    Replies: 7
    Last Post: 12th June 2007, 09:09 AM
  5. History Lesson
    By mighty.grey.eagle in forum General Chat
    Replies: 8
    Last Post: 10th January 2007, 11:52 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •