Link to home
Start Free TrialLog in
Avatar of brendanosmith
brendanosmithFlag for Afghanistan

asked on

What time did a user log in on a particular day?

How can I tell what time a particular user logged into his PC on a particular day?
Avatar of Interserv
Interserv

If the user is using Windows you can see a logon even in the security logs in event viewer.
based on your categories i assume its a domain.  you would need to review the event security logs on all dc's in that site.  SEarch for him.
also make sure you have failure and sucess logon events auditing turned on
Avatar of brendanosmith

ASKER

I see hundreds of successful audits but how do I know which one is his login
ASKER CERTIFIED SOLUTION
Avatar of Eric
Eric
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
What event ID am I looking for?