0
Run gpedit.msc
Navigate to the following folder: Local Computer Policy –> Computer Configuration –> Windows Settings –> Security Settings –> Local Policies –> Audit Policy.
Double-click the Audit logon events policy setting in the right pane to adjust its options.
TO view in event Viewer
Navigate to the Windows Logs –> Security category in the event viewer.
Look for events with event ID 4624 – these represent successful login events.
http://www.howtogeek.com/124313/how-to-see-who-logged-into-a-computer-and-when/
Here you can search for all event ID (search for category Logon/Logoff)
http://www.myeventlog.com/search/find
Here is the list of Event ID related to log
http://technet.microsoft.com/en-us/library/cc787176(v=ws.10).aspx
672,673,674,675,676,677,678,681,682,683
Posted on 3:58 AM by Softminer and filed under
Windows
Run gpedit.msc
Navigate to the following folder: Local Computer Policy –> Computer Configuration –> Windows Settings –> Security Settings –> Local Policies –> Audit Policy.
Double-click the Audit logon events policy setting in the right pane to adjust its options.
TO view in event Viewer
Navigate to the Windows Logs –> Security category in the event viewer.
Look for events with event ID 4624 – these represent successful login events.
http://www.howtogeek.com/124313/how-to-see-who-logged-into-a-computer-and-when/
Here you can search for all event ID (search for category Logon/Logoff)
http://www.myeventlog.com/search/find
Here is the list of Event ID related to log
http://technet.microsoft.com/en-us/library/cc787176(v=ws.10).aspx
672,673,674,675,676,677,678,681,682,683
Post a Comment