when a user has logged in and off the network

I was just asked by a memeber of management to let them know when a user has logged in today and noticed I didn't have the domain control logging in/out enabled.  I just turned it on and its working but is there anyway to tell prior to this GP being enabled?  I just need to see when they logged on today and in the past if possible.  Thank you!
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Mike KlineCommented:
Do you know their machine name?  Check the security logs on their workstation.
Hope that person came in on time :)
jbishop2446bAuthor Commented:
ha! that is exactly what they're needing me to check.  Only one entry in their security log on their machine...
Mike KlineCommented:
If you didn't have auditing on before it won't go back and pull that info.  Do you all have badges where you work.  If you do it maybe worth a shot to talk to those folks and see what time the person badged in.
...or catch him next week :)
Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

jbishop2446bAuthor Commented:
lol no badges, I wish... it's a single 5am guy, thank you for your help though.
I'm winging this from memory, but the DC logs should track this event as a 538 or 539 entry.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
jbishop2446b - another thought - you have posted this in only the 'Active Directory' Zone, which is very low on the activity scale around here.
You will get a lot more exposure if you click on the 'Request Attention' link and ask the Moderators to add in to the Server and Network Zones.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.