This use case outlines the migration challenges that organizations face and how the Acronis AnyData Engine supports physical-to-physical (P2P), physical-to-virtual (P2V), virtual to physical (V2P), and cross-virtual (V2V) migration scenarios to address these challenges.
Course Of The Month
6 days, 1 hour left to enrollBecome a Premium Member and unlock a new, free course in leading technologies each month.
Solved
Last Logged in User
Posted on 2010-09-13
Hi,
How do I find the last logged in user name in a particular system that is in Domain?
How do I find the last logged in user name in a particular system that is in Domain?
[X]
Welcome to Experts Exchange
Add your voice to the tech community where 5M+ people just like you are talking about what matters.
- Help others & share knowledge
- Earn cash & points
- Learn & ask questions
-
3
2
6 Comments
You should be able to find it in the registery here:
HKEY_LOCAL_MACHINE\SOFTWAR
String - LastLoggedOnUser = DOMAIN\User.Name
Hope this helps.
HKEY_LOCAL_MACHINE\SOFTWAR
String - LastLoggedOnUser = DOMAIN\User.Name
Hope this helps.
Hi Experts,
I Found the answer and Here it is
Go to the Event Manager-> Security Logs
Sort the Logs by Event ID and Look for ID No: 528 ( Logon / Log off). This Displays the Name of the User Logged in / Logged off.
The latest by Time stamp for this event points the Last user logged in / Logged off.
Note : This will Contains System ID's as well
I Found the answer and Here it is
Go to the Event Manager-> Security Logs
Sort the Logs by Event ID and Look for ID No: 528 ( Logon / Log off). This Displays the Name of the User Logged in / Logged off.
The latest by Time stamp for this event points the Last user logged in / Logged off.
Note : This will Contains System ID's as well
Hi Bryan
Sorry that I Couldn't Find the registry key Authentication under
HKEY_LOCAL_MACHINE\SOFTWAR
In the System.
Sorry that I Couldn't Find the registry key Authentication under
HKEY_LOCAL_MACHINE\SOFTWAR
In the System.
Just to fill in, if you have multiple DCs it will only be logged on the DC that did the authentication. It will not replicate this information with other DCs.
To be 100 per cents certain, you should check the log on every DC and check find the latest timestamp.
Tools like EventCombMT is helpful in cases like this.
http://www.microsoft.com/downloads/en/details.aspx?FamilyId=7AF2E69C-91F3-4E63-8629-B999ADDE0B9E&displaylang=en
To be 100 per cents certain, you should check the log on every DC and check find the latest timestamp.
Tools like EventCombMT is helpful in cases like this.
http://www.microsoft.com/downloads/en/details.aspx?FamilyId=7AF2E69C-91F3-4E63-8629-B999ADDE0B9E&displaylang=en
Featured Post
Synthetic Transaction Monitoring that you need for the day to day, which ensures your business website keeps running optimally, and that there is no downtime to impact your customer experience.
Question has a verified solution.
If you are experiencing a similar issue, please ask a related question
Always backup Domain, SYSVOL etc.using processes according to Microsoft Best Practices. This is meant as a disaster recovery process for small environments that did not implement backup processes and did not run a secondary domain controller that ne…
Auditing domain password hashes is a commonly overlooked but critical requirement to ensuring secure passwords practices are followed.
Methods exist to extract hashes directly for a live domain however this article describes a process to extract u…
Attackers love to prey on accounts that have privileges.
Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …
Suggested Courses
Course of the Month6 days, 1 hour left to enroll
Earn Certification
MCSA Configuring Windows 7 Exam 70-680
$49.00$44.10
707 members asked questions and received personalized solutions in the past 7 days.
Join the community of 500,000 technology professionals and ask your questions.