Solved

Last Logged in User

Posted on 2010-09-13
6
426 Views
Last Modified: 2013-11-25
Hi,

How do I find the last logged in user name  in a particular system that is in Domain?
0
Comment
Question by:Seshadrim
  • 3
  • 2
6 Comments
 
LVL 1

Expert Comment

by:BryanBuckles
ID: 33666924
You should be able to find it in the registery here:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI
String - LastLoggedOnUser = DOMAIN\User.Name

Hope this helps.
0
 

Accepted Solution

by:
Seshadrim earned 0 total points
ID: 33666976
Hi Experts,

I Found the answer and Here it is

Go to the Event Manager-> Security Logs

Sort the Logs by Event ID and Look for ID No: 528 ( Logon / Log off). This Displays the Name of the User Logged in / Logged off.

The latest by Time stamp for this event points the Last user logged in / Logged off.

Note : This will Contains System ID's as well
0
 

Author Comment

by:Seshadrim
ID: 33667008
Hi Bryan

Sorry that I Couldn't Find the registry key Authentication under

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion

In the System.

0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 
LVL 1

Expert Comment

by:BryanBuckles
ID: 33667126
Sorry that didnt help.  Glad you were able to find it though.
0
 
LVL 21

Expert Comment

by:snusgubben
ID: 33670932
Just to fill in, if you have multiple DCs it will only be logged on the DC that did the authentication. It will not replicate this information with other DCs.

To be 100 per cents certain, you should check the log on every DC and check find the latest timestamp.

Tools like EventCombMT is helpful in cases like this.

http://www.microsoft.com/downloads/en/details.aspx?FamilyId=7AF2E69C-91F3-4E63-8629-B999ADDE0B9E&displaylang=en
0
 

Author Closing Comment

by:Seshadrim
ID: 33999713
This Works
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article shows how to deploy dynamic backgrounds to computers depending on the aspect ratio of display
Learn how ViaSat reduced average response times for IT incidents from 10 minutes to 30 seconds.
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…

774 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question