I usually lock my PC with password while going out, but still there is chance one can still access my information by logging in.
So, how do I find out at what time I last logged in?
Logging in via the lock screen generates a security log trail by default. To find this:
run Event Viewer
(Win+r-> eventvwr.msc
, or Win+x->
v, or from the Control Panel etc)
Expand Windows Logs
in the left-hand pane
Select the Security
log type
Look for Logon
events, with type 7
(Logon Type 7 = Unlock Workstation
1), for logins from the lock screen
See illustration:
1 per this source for Windows logon event types
If you (or your domain administrator) have enabled account auditing, then you can find that information in your Security Event Log.
Event Viewer
and press EnterWindows Logs > Security
from the Event Viewer tree.Logon
.Several entries will often appear for any given logon. You can match logon and logoff entries based on the Logon ID
value within each event detail.
To enable Account Auditing Settings:
secpol.msc
and press EnterLocal Policy > Audit Policy
Audit account logon events
policy optionProperties
.Success
and Failure
check boxes.