urdesac said:
How can I know about the log-in and log-out of date and time of my OS? Is
there any documents or... windows' softwares embedded can help for this
please? I'm now using of XP Pro SP3. Thanks!
You can look through the System branch of Event Viewer for clues as to which
user is logged on at certain times but it's not the preferred method.
XP Pro records logon and logoff times in the Security branch of Event
Viewer.
Unfortunately, this is not enabled by default. You have to enable auditing
of
these types of events in the Local Security Policy. This will allow you to
view
future logon and logoff events.
To enable auditing go to Control Panel and open Administrative Tools.
Open Local Security Policy.
Click on the + sign next to Local Policies in the left hand pane.
Click on Audit Policy.
In the right hand pane, right click on "Audit logon events" and select
Properties from the menu.
Check Success and Failure and hit the OK button.
Close the Local Security Policy console.
To view logon and logoff events go to Control Panel and open Administrative
Tools.
Open Event Viewer.
Click on Security in the left hand pane.
Note: You can right click on Security, select Properties from the menu, and
click on the Filter tab to specify a specific user or time frame to display
in
the right hand pane.
Keep in mind that enabling auditing of logon
events at this time will not allow you to view any activity that happened in
the
past. It will start recording future logon events. Also, you may have to
increase the size of the log file to see all audited events if there are
several
users for this machine. The log size can be changed by right clicking on
Security in the left hand pane and selecting Properties from the menu. The
default is 512KB.
For more info, take a look at these articles.
Audit Policy Settings
http://www.microsoft.com/technet/security/prodtech/windowsxp/secwinxp/xpsgch03.mspx#ETE
How To Enable Security Auditing in Windows XP Pro
http://netsecurity.about.com/cs/tutorials/ht/ht040503.htm
Good luck
Nepatsfan
