<div>
<div class="content wysiwyg-content">
By default, do domain controllers record dates and times that specific users logged into the domain? If so where would such logs be, and are they human readable, or do you need a tool to view the contents. I need to identify when a user logged on and off the domain over a 2 month period.<br />
<br />
If not, is there anywhere else you may be able to get this information?
</div>
</div>


By default, do domain controllers record dates and times that specific users logged into the domain? If so where would such logs be, and are they human readable, or do you need a tool to view the contents. I need to identify when a user logged on and off the domain over a 2 month period.

If not, is there anywhere else you may be able to get this information?

domain login reports

Active Directory (AD) is a Microsoft brand for identity-related capabilities. In the on-premises world, Windows Server AD provides a set of identity capabilities and services, and is hugely popular (88% of Fortune 1000 and 95% of enterprises use AD). This topic includes all things Active Directory including DNS, Group Policy, DFS, troubleshooting, ADFS, and all other topics under the Microsoft AD and identity umbrella.

Active Directory

Operating system security (OS security) is the process of ensuring OS integrity, confidentiality and availability. OS security refers to specified steps or measures used to protect the OS from threats, viruses, worms, malware or remote hacker intrusions. OS security encompasses all preventive-control techniques, which safeguard any computer assets capable of being stolen, edited or deleted if OS security is compromised, including authentication, passwords and threats to systems and programs.

OS Security

Digital forensics encompasses the recovery and investigation of material found in digital devices, often in relation to computer crime. Digital forensics investigations have a variety of applications. The most common is to support or refute a hypothesis before criminal or civil (as part of the electronic discovery process) courts. The technical aspect of an investigation is divided into several sub-branches, relating to the type of digital devices involved; computer forensics, network forensics, forensic data analysis and mobile device forensics. The typical forensic process encompasses the seizure, forensic imaging (acquisition) and analysis of digital media and the production of a report into collected evidence.