Security Basics mailing list archives

Re: WinXP Login Logs


From: "Mitch Pope" <mitch () bigbridge com au>
Date: Fri, 7 Jan 2005 08:27:51 +1000

Turn on "Display last user" in the local security policy.  That way when you
press control+alt+del after bootup it will show the last username in the
login username box.

Another thing to be aware of is computers configured to startup on detection
of fresh power.  So if power drops out through the night and then comes back
a few minutes later the computers may start up by themselves.  But that
however does not explain them being used.

Mitch

----- Original Message -----
From: "Bruno Guedes Souto" <brunoguedes () gmail com>
To: <security-basics () securityfocus com>
Sent: Thursday, January 06, 2005 10:45 PM
Subject: WinXP Login Logs


Suddenly here in my work, some PCs are being turned on by "ghosts"
during night/clean periods and they are being used! How can I know the
last person who logged in? Are there some kind of login logs in win
xp?

Regards

Bruno Souto




Current thread: