How to See Who Logged Into a Computer (and When)?
The Audit logon events setting tracks both local logins and network logins. Each logon event specifies the user account that logged on and the time the login took place. You can also see when users logged off.
Note:- The audit logon works on all versions of Windows except the Home edition. It should work on windows 7, 8, 10 as well as windows server 2008, 2012,2016, and 2019. We are going the cover windows 10 in this article.
Here you go with the simple steps;-
Enable Logon Auditing
To open the Local Group Policy Editor, hit Start, type “gpedit.msc,“ and then select the resulting entry.
After opening the local group policy, please go to Local Computer Policy > Computer Configuration > Windows Settings > Security Settings > Local Policies > Audit Policy. In the right-hand pane, double-click the “Audit logon events” setting.
You are done here, close the local group policy editor windows.
View Logon Events.
View Logon Events.
Once you enable the Logon Audit, windows start to keep the record of the login event. You will able to see logon events through event viewers.
To open the event views. Hit the start and type “event,” and then click the “Event Viewer” result.
In the “Event Viewer” window, in the left-hand pane, navigate to the Windows Logs > Security.
0 Comments