XP Pro-Log on Log Off history

  • Thread starter Thread starter ???????
  • Start date Start date
?

???????

Where in XP Pro can I check log on and log off times.Is there a log file ?if
yeah how di iget there.thanxalot
 
How to view and manage event logs in Event Viewer in Windows XP
http://support.microsoft.com/kb/308427/en-us

See info on the 'Security' log.

JS

"???????" <???????@discussions.microsoft.com> wrote in message
news:B46AF787-585C-4CF9-B582-B5544751648B@microsoft.com...
> Where in XP Pro can I check log on and log off times.Is there a log file
> ?if
> yeah how di iget there.thanxalot
 
"???????" <???????@discussions.microsoft.com> wrote in message
news:B46AF787-585C-4CF9-B582-B5544751648B@microsoft.com...
> Where in XP Pro can I check log on and log off times.Is there a log
> file ?if
> yeah how di iget there.thanxalot


Event Viewer

You can audit the the logon events. Run:

secpol.msc

Under Local Policy -> Audit Policy, enable the "Audit [account] logon
events". Just enable when a successful login occurs (unless you are
interested in how many times someone tries to login and it fails).
 
"???????" <???????@discussions.microsoft.com> wrote in message
news:B46AF787-585C-4CF9-B582-B5544751648B@microsoft.com...
> Where in XP Pro can I check log on and log off times.Is there a log file ?if
> yeah how di iget there.thanxalot


XP Pro records logon and logoff times in the Security branch of Event Viewer.
Unfortunately, this is not enabled by default. You have to enable auditing of
these types of events in the Local Security Policy. This will allow you to view
future logon and logoff events.

To enable auditing go to Control Panel and open Administrative Tools.
Open Local Security Policy.
Click on the + sign next to Local Policies in the left hand pane.
Click on Audit Policy.
In the right hand pane, right click on "Audit logon events" and select
Properties from the menu.
Check Success and Failure and hit the OK button.
Close the Local Security Policy console.


To view logon and logoff events go to Control Panel and open Administrative
Tools.
Open Event Viewer.
Click on Security in the left hand pane.
Note: You can right click on Security, select Properties from the menu, and
click on the Filter tab to specify a specific user or time frame to display in
the right hand pane.

Good luck

Nepatsfan
 
Back
Top