Enable Auditing:
Control Panel - Administrative Tools - Local Security Policy - Local
Policies (expand it) - Audit Policy - Audit Account Logon Events (enable
both Success and Failure attempts)

Restart.

"Martin Caldwell" <martinca20@hotmail.com> wrote in message
news:47e0251f$0$4766$9b4e6d93@newsspool3.arcor-online.net...
> Is there a way to find out when user XXX logged in and out from WinXP on
> e.g. last Tuesday ?
>
> I could imagine that there is an event log entry written.
> However I do not see it. Do I have to enable "User logon/logoff event log
> records" somewhere ?
>
> If these kind of events are not logged: Is there another way (work around)
> to write
> (automatically) event log records (in the future) when users log off?
>
> How can I (as normal user) write easily log records into the system log
> (e.g. from command line)?
>
> Martin
>