In C:\Users, does the date last modified of the user's profile folder equate to the last day they logged out?

link|improve this question

62% accept rate
My user folder says that I have last modified it some hours ago, while I did my last reboot an half hour ago. No. – Tom Wijsman Dec 27 '11 at 3:13
feedback

2 Answers

up vote 2 down vote accepted

In the event viewer, go to the Security log in the Windows Logs. Here, look for events that are in the Task Category called Logoff. More specificall, events with ID 4634 are Logoff events.

You can create a new Custom View and filter by that event ID if you want to gather them together.

link|improve this answer
feedback

No. Use the Security event log to check this instead.

link|improve this answer
Thanks. I guess the folder's modified date does not correspond to the modified date of the folder's contents. – Steve Dec 27 '11 at 3:03
What event log in particular? What event? – Steve Dec 27 '11 at 3:09
feedback

Your Answer

 
or
required, but never shown

Not the answer you're looking for? Browse other questions tagged or ask your own question.