Windows Forum

Ask something
Discussion Locked

Did someone logon over the weekend?

0 helpful
9 replies

by shaun 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

How do I find out if someone logged onto an NT network over the weekend. Is there a log file on the pdc to check this.

Thank you

9 replies

by dc1

The easiest way is to enable auditing on your domain controllers for failed/successfull logins. You would then view the audits in the security section of event viewer.

by syscokid

Yes, run Event Viewer (under NT Administration Tools on the Start menu). Click on File, and choose Security Log. This will show you who logged in.

by bejon.parsinia

As some people have stated, the easiest way is to set up auditing of successful login attempts. However, be warned that your log files can become quite long if you have many users logging in to your servers. But this suggestion will work and allowyou to search for weekend warriors.

This discussion is closed to new replies.