0
Posted on 3:58 AM by Softminer and filed under

Run gpedit.msc

Navigate to the following folder: Local Computer Policy –> Computer Configuration –> Windows Settings –> Security Settings –> Local Policies –> Audit Policy.

Double-click the Audit logon events policy setting in the right pane to adjust its options.

TO view in event Viewer

Navigate to the Windows Logs –> Security category in the event viewer.

Look for events with event ID 4624 – these represent successful login events.

http://www.howtogeek.com/124313/how-to-see-who-logged-into-a-computer-and-when/

Here you can search for all event ID (search for category Logon/Logoff)
http://www.myeventlog.com/search/find


Here is the list of Event ID related to log
http://technet.microsoft.com/en-us/library/cc787176(v=ws.10).aspx

672,673,674,675,676,677,678,681,682,683
0
Responses to ... Logon Auditing policy