RE: WinXP Login Logs

["Bob Beck" <goodfela26 () finneganfamily net>]

In case you haven't been answered yet, you can audit account logon events
and logon events via a GPO on your domain or on the local computers if you
don't have a domain. It's located under Computer Configuration\Windows
Settings\Security Settings\Local Policies\Audit Policies.

I hope that helps.

Bob

-----Original Message-----
From: Bruno Guedes Souto [mailto:brunoguedes () gmail com]
Sent: Thursday, January 06, 2005 7:45 AM
To: security-basics () securityfocus com
Subject: WinXP Login Logs


Suddenly here in my work, some PCs are being turned on by "ghosts"
during night/clean periods and they are being used! How can I know the
last person who logged in? Are there some kind of login logs in win
xp?

Regards

Bruno Souto