monitoring User logins

[Thnoss]

I have had a look at my security event viewer and was expecting to see the login events but I only see failed logins not successful ones. Is this normal? if not any ideas why this would be happening would be great, if this is normal is there anywhere else that I can find the times a user logged in. I have read a previous thread about generating a script to do this which I will do but I need to check a users login times for last week.

Cheers




"That which does not kill us, only makes us stronger"

 

[rstitzel]

Under the properties of the security log check if there is a filter allowing only failed audits to display.

FYI