| |||||||
| Windows XP Discuss the Microsoft Windows XP Operating System |
 |
| | LinkBack | Thread Tools |
04-12-2008, 09:10 AM
| |||
| |||
| How to find user logon+logoff events in event log (after enabling audit)? Yes, I enabled user auditing in SecPol.msc Now after a few days of working (with a couple of logon+logoffs) I wanted to see in the event log where the refering entries are. Where are they? I found only User="SYSTEM" logon entries in Security but no logoffs and no entries for other users. In System log as well. Can I audit logoffs at all? Michael      |
|
04-12-2008, 09:20 AM
| |||
| |||
| RE: How to find user logon+logoff events in event log (after enabling Seems like event viewer would have some details. "Michael Walsh" wrote: > Yes, I enabled user auditing in SecPol.msc > > Now after a few days of working (with a couple of logon+logoffs) I wanted to see in > the event log where the refering entries are. > > Where are they? > > I found only User="SYSTEM" logon entries in Security but no logoffs and no entries for other users. > In System log as well. > > Can I audit logoffs at all? > > Michael > > |
|
| Bookmarks |
| Thread Tools | |
| |
Similar Threads | ||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| How do I find out when user XXX logged in+out on last Tuesday? Event log entry possible? | Martin Caldwell | Windows XP | 0 | 03-18-2008 12:30 PM |
| logon and logoff need | Skamionek | Internet Explorer | 0 | 03-13-2008 07:41 AM |
| Failure Audit on Event Log | Ludwin Pacheco | Windows XP | 2 | 10-02-2007 07:20 AM |
| Slow Logoff / Strange Log Events | Shawn McCuan | Windows Vista | 2 | 05-14-2007 12:30 PM |
| Logon/Logoff issue | RAID!!! | Windows XP | 6 | 01-04-2007 04:10 AM |
