"asus61" wrote in message
news
1DF34B3-8F8A-4F60-9426-5F0310FF4E0D@microsoft.com...
>i have neccesity to search a history of login (from today to 10 days
>old)
> into computer from my domain users.
> what are the file or .log or event logs for find it ???
Go into the security policy editor (secpol.msc) or group policy editor
(gpedit.msc), depending on whether or not you are logging in under a
domain, and check what auditing functions you have enabled. One of
those policies is to track logon/logoff events (which get recorded in
the Event Viewer logs).
For secpol.msc:
Security Settings -> Local Policies -> Audit Policy
For gpedit.msc:
Local Computer Policy -> Computer Configuration -> Windows Settings ->
Security Settings -> Local Policies -> Audit Policy
Of course, I you didn't have auditing enabled for the past 10 days
then you can't see those unlogged events over those last 10 days.