RE: WinXP Login Logs

["Raoul Armfield" <armfield () amnh org>]

Why don't you enable auditing on those machines.  In XP you can go to Start
| Programs | Administrative tools | Local security policy | Local policies |
Audit policy.  Enable both success and failure logon events and account
logon events.


Or if they are part of a domain you can enable auditing on the server.

Raoul  

:-----Original Message-----
:From: Bruno Guedes Souto [mailto:brunoguedes () gmail com] 
:Sent: Thursday, January 06, 2005 7:45 AM
:To: security-basics () securityfocus com
:Subject: WinXP Login Logs
:
:Suddenly here in my work, some PCs are being turned on by "ghosts"
:during night/clean periods and they are being used! How can I know the
:last person who logged in? Are there some kind of login logs in win
:xp?
:
:Regards
:
:Bruno Souto
: