Veeam PN for Microsoft Azure is a FREE solution designed to simplify and automate the setup of a DR site in Microsoft Azure using lightweight software-defined networking. It reduces the complexity of VPN deployments and is designed for businesses of ALL sizes.
Solved
Last Logged in User
Posted on 2010-09-13
Hi,
How do I find the last logged in user name in a particular system that is in Domain?
How do I find the last logged in user name in a particular system that is in Domain?
[X]
Welcome to Experts Exchange
Add your voice to the tech community where 5M+ people just like you are talking about what matters.
- Help others & share knowledge
- Earn cash & points
- Learn & ask questions
-
3
2
6 Comments
You should be able to find it in the registery here:
HKEY_LOCAL_MACHINE\SOFTWAR
String - LastLoggedOnUser = DOMAIN\User.Name
Hope this helps.
HKEY_LOCAL_MACHINE\SOFTWAR
String - LastLoggedOnUser = DOMAIN\User.Name
Hope this helps.
Hi Experts,
I Found the answer and Here it is
Go to the Event Manager-> Security Logs
Sort the Logs by Event ID and Look for ID No: 528 ( Logon / Log off). This Displays the Name of the User Logged in / Logged off.
The latest by Time stamp for this event points the Last user logged in / Logged off.
Note : This will Contains System ID's as well
I Found the answer and Here it is
Go to the Event Manager-> Security Logs
Sort the Logs by Event ID and Look for ID No: 528 ( Logon / Log off). This Displays the Name of the User Logged in / Logged off.
The latest by Time stamp for this event points the Last user logged in / Logged off.
Note : This will Contains System ID's as well
Hi Bryan
Sorry that I Couldn't Find the registry key Authentication under
HKEY_LOCAL_MACHINE\SOFTWAR
In the System.
Sorry that I Couldn't Find the registry key Authentication under
HKEY_LOCAL_MACHINE\SOFTWAR
In the System.
Just to fill in, if you have multiple DCs it will only be logged on the DC that did the authentication. It will not replicate this information with other DCs.
To be 100 per cents certain, you should check the log on every DC and check find the latest timestamp.
Tools like EventCombMT is helpful in cases like this.
http://www.microsoft.com/downloads/en/details.aspx?FamilyId=7AF2E69C-91F3-4E63-8629-B999ADDE0B9E&displaylang=en
To be 100 per cents certain, you should check the log on every DC and check find the latest timestamp.
Tools like EventCombMT is helpful in cases like this.
http://www.microsoft.com/downloads/en/details.aspx?FamilyId=7AF2E69C-91F3-4E63-8629-B999ADDE0B9E&displaylang=en
Featured Post
Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.
Question has a verified solution.
If you are experiencing a similar issue, please ask a related question
Group policies can be applied selectively to specific devices with the help of groups. Utilising this, it is possible to phase-in group policies, over a period of time, by randomly adding non-members user or computers at a set interval, to a group f…
This article provides a convenient collection of links to Microsoft provided Security Patches for operating systems that have reached their End of Life support cycle. Included operating systems covered by this article are Windows XP, Windows Server…
- Ransomware
- Experts Exchange
- Windows XP
- Windows OS
- Windows Server 2008
- Windows Server 2003, Security
Are you ready to implement Active Directory best practices without reading 300+ pages?
You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…
Suggested Courses
Course of the Month10 days, 3 hours left to enroll
609 members asked questions and received personalized solutions in the past 7 days.
Join the community of 500,000 technology professionals and ask your questions.