• Do See What I See

The new European data protection law requires us to inform you of the following before you use our website: We use cookies and other technologies to customize your experience, perform analytics and deliver personalized advertising on our sites, apps and newsletters and across the Internet based on your interests. By clicking “I agree” below, you consent to the use by us and our third-party partners of cookies and data gathered from your use of our platforms. See our and to learn more about the use of data and your rights. You also agree to our.

Note: Logon auditing only works on the Professional edition of Windows, so you can’t use this if you have a Home edition. This should work on Windows 7, 8, and Windows 10. We’re going to cover Windows 10 in this article. The screens might look a little different in other versions, but the process is pretty much the same.

Apple mac os 8 office and business software for mac. Enable Logon Auditing RELATED: To enable logon auditing, you’re going to use the Local Group Policy Editor. It’s a pretty powerful tool, so if you’ve never used it before, it’s worth taking some time to.

Also, if you’re on a company network, do everyone a favor and check with your admin first. If your work computer is part of a domain, it’s also likely that it’s part of a domain group policy that will supersede the local group policy, anyway. To open the Local Group Policy Editor, hit Start, type “gpedit.msc, “ and then select the resulting entry.

In the Local Group Policy Editor, in the left-hand pane, drill down to Local Computer Policy Computer Configuration Windows Settings Security Settings Local Policies Audit Policy. In the right-hand pane, double-click the “Audit logon events” setting. In the properties window that opens, enable the “Success” option to have Windows log successful logon attempts. Enable the “Failure” option if you also want Windows to log failed logon attempts. Click the “OK” button when you’re done. You can now close the Local Group Policy Editor window. View Logon Events RELATED: After you enable logon auditing, Windows records those logon events—along with a username and timestamp—to the Security log.

Do See What I See

You can view these events using. Hit Start, type “event,” and then click the “Event Viewer” result. In the “Event Viewer” window, in the left-hand pane, navigate to the Windows Logs Security. In the middle pane, you’ll likely see a number of “Audit Success” events. Windows logs separate details for things like when an account someone signs on with is successfully granted its privileges. You’re looking for events with the event ID 4624—these represent successful login events.

You can see details about a selected event in the bottom part of that middle-pane, but you can also double-click an event see its details in their own window. And if you scroll down just a bit on the details, you can see information you’re after—like the user account name. And because this is just another event in the Windows event log with a specific event ID, you can also to take action when a logon occurs. You can even.