Re: who's loggin on when?

In news:9DE92439-FC17-4A5B-B697-1AEA1AC134A8@xxxxxxxxxxxxx,
daffy2000 <daffy2000@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:
Is there a log that tells me who is logging in when on xp.
Say i
want to see if some one is using my screen name while i'm not
home.
Is there a file that tells me who is logging on at a specific
time,
and date.

If you're running Windows XP Home Edition go to Start ->
Control Panel -> Administrative Tools and open up the Event
Viewer. In the left hand column, click on Security. In the
right hand pane, click on the User column. Scroll down to your
user name and look for successful Logon/Logoff events.

If you're running XP Professional, you'll have to enable
auditing of logon events. You can do that through the local
security policy. Once this is done you'll be able to view
future logon events in Event Viewer using the procedure
outlined above.

Go to Start -> Control Panel -> Administrative Tools and double
click on Local Security Policy.
In the Local Security Policy editor, navigate to this policy.

Security Settings\Local Policies\Audit Policy

In the right hand pane, right click on Audit logon events.
Select Properties from the menu.
Put a check mark in the box next to both Success and Failure.
Click OK.

For more info, take a look at these articles.

Audit Policy Settings
http://www.microsoft.com/technet/security/prodtech/windowsxp/secwinxp/xpsgch03.mspx#ETE

How To Enable Security Auditing in Windows XP Pro
http://netsecurity.about.com/cs/tutorials/ht/ht040503.htm

Good luck

Nepatsfan


.

Relevant Pages

  • Re: Monitoring user access.
    ... Security Policy. ... In the right hand pane, right click on Audit logon events. ... Keep in mind that if you're running XP Professional, enabling auditing of logon ...
    (microsoft.public.windowsxp.security_admin)
  • Re: How do I find out when user XXX logged in+out on last Tuesday? Event log entry possible?
    ... You can do that through the local security policy. ... In the right hand pane, right click on Audit logon events. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Windows XP User logs
    ... You can do that through the local security policy. ... In the right hand pane, right click on Audit logon events. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Bad PAssword Attempts not logged
    ... On one of the domain computer view the Local Security Policy for auditing to ... If you have logon events enabled, ...
    (microsoft.public.win2000.security)
  • Re: Monitor Hacker acitivities
    ... Enable auditing of logon events in the security policy for your DC - either at Domain ... That is done if for instance you have a web server - port 80/443tcp, ... port 1723/1701, remote access - port 3389tcp available to users, or other services. ...
    (microsoft.public.security)