Hello All,

I had a security issue the other day and needed to know who logged on to a
Windows XP desktop that is connected to a Domain. They didn't log into the
local machine, they logged into the domain. I know there are tools to tell me
who is currently logged in but is there anything in the Event logs, temp, or
any other directory that might give me a username and time stamp from a user
that logged on to the desktop X days ago?

Thanks in advance.