Re: trail of usage

From: Chris Jackson (chrisjATmvpsDOTorgNOSPAM)
Date: 02/18/04


Date: Wed, 18 Feb 2004 14:31:42 -0500

If you are running XP Pro, you can audit logins. From an admin account, go
to start - run - gpedit.msc. This brings up the group policy window.
Navigate to Computer Configuration\Windows Settings\Security Settings\Local
Policies\Audit Policy and you can turn on tracking for account logon events.
Then, you will have an entry in the event log for each login attempt.

I honestly don't know if you can do this in XP Home as well.

-- 
Chris Jackson
Software Engineer
Microsoft MVP - Windows Client
Windows XP Associate Expert
-- 
More people read the newsgroups than read my email.
Reply to the newsgroup for a faster response.
(Control-G using Outlook Express)
-- 
"Happy" <happy@trial.ca> wrote in message 
news:kzMYb.99543$IF6.2879610@ursa-nb00s0.nbnet.nb.ca...
> Is there a way to determine when a comuter is used and when it is not,
> perhaps similar to the Internet Explorer log of temp files?
> 


Relevant Pages

  • Re: Group Policy Editor
    ... don't want to let guests run in an admin account. ... If you mean *some* programs - group policy isn't where you do stuff ... Oh - and don't forget to complain to the product developers about ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Group Policy Editor
    ... software installation node like the help files say there is. ... want to let guests run in an admin account. ... If you mean *some* programs - group policy isn't where you do stuff like ... You're right, it's not all apps, just some apps. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: disable net create command
    ... this creates a local acct. ... acct just unrrestricted through group policy. ... >> a user created a local admin account by writing a net ... >> create batch file in wordpad and ran it creating a local ...
    (microsoft.public.win2000.security)
  • Re: DFRG BootOptimizeFunction Error
    ... >I ran rundll32 advapi32 ProcessIdleTasks from my Admin account and it worked ... >group policy that is causing this process to be run ... tools/advanced info/view group policy settings applied ...
    (microsoft.public.windowsxp.perform_maintain)