How to track down what PC a user last logged on to

[krb548]

I have a user account in school that keeps send spam emails. I have checked Office 365 and cannot see a way of blocking this users.

I suspect that a machine onsite may be compromised by need to find out where the user last logged into.

 

Does anyone know an easy way to find out this info?

The PC's are Win 7 & domain is running 2012 logon servers

 

Any help would be appreciated, Thanks.

[Garacesh]

To block a user, you either set them as having sign-in disabled, or you remove the licenses assigned to them.

 

It's more likely that the account is compromised rather than a machine.

[Achandler]

Change the password as well, activesync etc take a few days (upto a week) to be disabled even if you disable sign-in.

 

Sounds stupid I know but we had a remember of staff getting emails despite being disabled, Microsoft informed me the only sure way to stop it immediately was a password change... reassuring.... not