Security

I'm assuming you haven't implemented security logging but if so, you can check the Event Viewer on the server.

Otherwise, if you have access to the NT Resource Kit, there is a utility called NLTEST.EXE that will read the last logon time from the security database. The syntax to run this command and write the results to a text file would be:

nltest.exe /SERVER: /USER: > logon.txt

paul

The above suggestion will get your data but it will not work from the console of the machine you want the data from. Best done over the network.

Strongly suggest to the user they setup the screen saver to startup after 15 minutes. And use the password lock. So if this happens in the future at least the machine will lock after a few minutes.

ralph

I think the logoff process had not been succeed, maybe because application crashed. Crashed application sometimes cannot bo closed during logoff and need to be manually closed (End Task). So check Event Viewer to find the crashed application then try to fix it. Reinstalling NT service pack or other apps fixes maybe help.

This question was closed by the author