local user log in records

  • Thread starter Thread starter Dave
  • Start date Start date
D

Dave

Is there a way to keep track of when a local user account
is logged in on an Win XP pro system?

Would like a date and time log and also when the session
is logged out.

Thanks
 
If you've configured auditing correctly, look in Event
Log\Security. I'm assuming here that you're not talking
about a domain-level security policy, although the paths
are similar:

I recommend logging Success and Failure in everything
except Object Access, Privilege Use, and System Events.
For those items, audit failures only. These items are
configured in Local Policies\Audit Policy.

You should also audit the access of global system objects
and use of the Backup and Restore privilege. These two
items are enabled in Local Policies\Security Options.

David Dickinson
eveningstar at mvps dot org
(Please reply only to this newsgroup)
 
Back
Top