Sunday, 16 March 2014

HOW TO SEE THE LIST OF LOGIN AND LOGOUT EVENTS IN WINDOWS

Have you ever wanted to check if anyone has logged in to your computer in your absence ?
Well now you have the option to check ( the option was previously available , but you get to know about it now  :p  
1. Click on start -> run ( or simply press windows button + r ) .
2. Type eventvwr.msc
3. Here you will see a new window will pop up.
4. From the available option in the left select and choose windows logs  and then security .
5. In the middle of the window you will see a list with Date and Time, Source, Event ID, and Task Category columns. The Task Category pretty much explains the event: Logon, Special Logon, Logoff, and other details .



The events will be called Audit Success .The category will be logon.
There will be many logs available , this is normal . But we will look for logons with ID - 4624 that is successful logons.


Under the General Tab in the area below the list, look for NEW ID, and ignore “SYSTEM”.
basically the normal logins will look somehow like this:

If you find the id to be different than it means either it is virus or someone has forcefully logged in to your system .

For any doubts or suggestions please comment below.
Kindly share the post with your friends .

No comments:

Post a Comment