Who has logged in?

Hello All,

I had a security issue the other day and needed to know who logged on to a
Windows XP desktop that is connected to a Domain. They didn't log into the
local machine, they logged into the domain. I know there are tools to tell me
who is currently logged in but is there anything in the Event logs, temp, or
any other directory that might give me a username and time stamp from a user
that logged on to the desktop X days ago?

Thanks in advance.

Not unless you've had your auditing turned on...

--
Sincerely,

Daniel Petri
MVP, Senior IT consultant, trainer
www.petri.co.il

"Randy" <Randy@discussions.microsoft.com> wrote in message
news:1C322740-800A-42D2-A942-BA58B9D07E5A@microsoft.com...
> Hello All,
>
> I had a security issue the other day and needed to know who logged on to a
> Windows XP desktop that is connected to a Domain. They didn't log into the
> local machine, they logged into the domain. I know there are tools to tell
> me
> who is currently logged in but is there anything in the Event logs, temp,
> or
> any other directory that might give me a username and time stamp from a
> user
> that logged on to the desktop X days ago?
>
> Thanks in advance.