List all previous windows login

I have a user that is coming in at night and using the pc out of office hrs. I need a list of all the times she has logged in. I think she leaves her pc locked and just unlocks it when she comes in. Is there a way of finding a list of all the times she has logged in???

Any help appreciated.
j8547Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Muhammad KhanManager, ITCommented:
if you have enabled Audit... you can look at log on events in the event logs of active directory using eventvwr.exe
0
Steve KnightIT ConsultancyCommented:
If she just locks / unlocks the machine it may be more awkward to find out mind...

If this isn't wanted have you thought of putting time restrictions on her AD account?
0
j8547Author Commented:
No haven't thought that far. I am not sure what she does but I don't think she logs out all the time. only sometime but thanks for letting me know I can put a time restriction on.
0
Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

Mike KlineCommented:
You should see unlock events in the logs too, they will be event type 7   http://www.windowsecurity.com/articles/logon-types.html

One attached example from my 2008 R2 box

Thanks

Mike
LogonType7.jpg
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
j8547Author Commented:
I can see logon log off events but just onto domain. I can't filter to pc or user.
0
Mike KlineCommented:
Did you check the local security logs on the PC?

Thanks

Mike
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft DOS

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.