Security Basics mailing list archives

Re: WinXP Login Logs


From: Jonathan Glass <jonathan.glass () gmail com>
Date: Thu, 6 Jan 2005 13:59:01 -0500

On Thu, 6 Jan 2005 10:45:25 -0200, Bruno Guedes Souto
<brunoguedes () gmail com> wrote:
Suddenly here in my work, some PCs are being turned on by "ghosts"
during night/clean periods and they are being used! How can I know the
last person who logged in? Are there some kind of login logs in win
xp?

Regards

Bruno Souto


I have a script in the NETLOGON folder which records the user
information, machine information, and time info into a file on a
hidden share.  This comes in really handy when stuff like this
happens.

Jonathan


Current thread: