Hey guys, In school I need to prove someone was logged onto a certain station. I know the login is cached but I have no idea how to extract it. Does anyone know how I can get the last few usernames of people who logged on?
Its in the registry somewhere isnt it?
Thanks
Pull cache of last logged on users?
- 10 Dec 2008 #1
Official Best Member
My System SpecsPull cache of last logged on users?
- 10 Dec 2008 #2My System Specs
Re: Pull cache of last logged on users?
you can enabled auditing for successful logins and logoffs. Set event viewer not to overwrite logs. This will allow you to see the events.
- 10 Dec 2008 #3
Official Best Member My System SpecsRe: Pull cache of last logged on users?
Except I need to see it now, its already been done. Is there a way to check who logged on which is enabled by default?
- 10 Dec 2008 #4My System Specs
Re: Pull cache of last logged on users?
Did you enable logging in verbose mode in the policy? Did you check the event viewer security log. This is where it should be if enabled.
Reply With Quote
Pull cache of last logged on users? problems?
| Similar Threads | ||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| Standard users is immediately logged off | austel | Vista account administration | 6 | 18 Nov 2008 |
| RE: Searching AD for users that have not logged on for X number of day | PaulChavez | PowerShell | 0 | 13 Sep 2008 |
| How to get info about currently logged in users on a server machin | Fellow Programmer | PowerShell | 0 | 11 Aug 2008 |
| Powershell - open files and logged in users | Don Murphy | PowerShell | 2 | 29 May 2008 |
| Get list of logged in users and login period? | Carsten Krueger | PowerShell | 7 | 27 Feb 2008 |
