Login Log

[kpetursson]

Does windows NT keep a log of attempted logins?
We seen to have someone tring to log in to the computers after hours, and I want to know if I can find out exactly when someone tries to log on to a computer?


Kevin Petursson

Dogs come when they're called.
Cats come when they're interested!

 

[wolf2x]

Auditing needs to be turned on. If you guys have an NT server, the administrator should have already turned auditing on for failed/successful logons.

If so, just check event viewer...security.

 

[kpetursson]

Logons are tracked. But what about when a user locks their work station, and someone without the password tries to unlock it? Does the machine keep track of this? Do I need to turn on something like the auditing on the machine?

Kevin Petursson

Dogs come when they're called.
Cats come when they're interested!

 

[wolf2x]

Yeah, turn on auditing on the individual workstation (via user manager).

It will track logon attempts from a "locked" workstation as well as normal logon attempts.