3

I'm using a remote computer with admin rights. But looks like that someone has logged on this remote computer while I'm not logged and disturbed my running work.

Question: How to know who has logged on this computer for the last day for example?

PS: My computer and the remote one are both win 7

KhaledMaged
  • 133

1 Answers1

2

One easy thing you could do is open Event Viewer and view the Security logs, which is found under the Windows Logs folder. If you organize the events by Event ID and look for Event ID #4624, which the task category for that event is Logon.

This will give you the account name of who logged in, and what the time/date was.

Here is an example of my event audit from when I logged back onto my computer earlier. enter image description here

DrZoo
  • 11,391