[Webinar] Learn how to a build a cloud-first strategyRegister Now


security--who's been using my computer?

Posted on 2007-10-11
Medium Priority
Last Modified: 2013-12-19
where do i look on a windows xp pro workstation to tell who has recently logged onto that machine?  The user thinks someone (housekeeping, security, etc.) after hours is using her computer.  What log would I look at and how do I get to it to tell what user has been on it? (all workstations are connected to a windows 2003 server domain controller).  Is the answer on the local machine or in a log on the server?
Question by:trwpentecost

Assisted Solution

mystics7 earned 400 total points
ID: 20058237
eventvwr.msc type that in run and look under security. this will show on the local machine or the server depending were you run it. Run it local and it's the WS. Run it on the server (DC) and this will show all users
LVL 66

Accepted Solution

johnb6767 earned 800 total points
ID: 20058532
Just to add to mystics7 suggestion....

Logon Type Codes Revealed

Helps to decipher whether the logon events are local, or across the network, by knowing the Logon Types....
LVL 70

Assisted Solution

KCTS earned 800 total points
ID: 20058997

Featured Post

 The Evil-ution of Network Security Threats

What are the hacks that forever changed the security industry? To answer that question, we created an exciting new eBook that takes you on a trip through hacking history. It explores the top hacks from the 80s to 2010s, why they mattered, and how the security industry responded.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Recently, I read that Microsoft has analysed statistics for their security intelligence report. It revealed: still, the clear majority of windows users do their daily work as administrator. An administrative account is a burden, security-wise. My ar…
Trying to figure out group policy inheritance and which settings apply where can be a chore.  Here's a very simple summary I've written which might help.  Keep in mind, this is just a high-level conceptual overview where I try to avoid getting bogge…
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…
Michael from AdRem Software explains how to view the most utilized and worst performing nodes in your network, by accessing the Top Charts view in NetCrunch network monitor (https://www.adremsoft.com/). Top Charts is a view in which you can set seve…

865 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question