Link to home
Start Free TrialLog in
Avatar of Seshadrim
SeshadrimFlag for India

asked on

Last Logged in User

Hi,

How do I find the last logged in user name  in a particular system that is in Domain?
Avatar of BryanBuckles
BryanBuckles

You should be able to find it in the registery here:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI
String - LastLoggedOnUser = DOMAIN\User.Name

Hope this helps.
ASKER CERTIFIED SOLUTION
Avatar of Seshadrim
Seshadrim
Flag of India image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Seshadrim

ASKER

Hi Bryan

Sorry that I Couldn't Find the registry key Authentication under

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion

In the System.

Sorry that didnt help.  Glad you were able to find it though.
Just to fill in, if you have multiple DCs it will only be logged on the DC that did the authentication. It will not replicate this information with other DCs.

To be 100 per cents certain, you should check the log on every DC and check find the latest timestamp.

Tools like EventCombMT is helpful in cases like this.

http://www.microsoft.com/downloads/en/details.aspx?FamilyId=7AF2E69C-91F3-4E63-8629-B999ADDE0B9E&displaylang=en
This Works