10

I would like to find a record of my exact login time this morning. But here's the wrinkle: Our sys admins will not let us open a command shell or view security logs. This makes this question rather different from other similar questions I have seen on this site. Any ideas? Thanks.

Improve this question
4
  • You're not even allowed to open the Command Prompt?! Can't you ask them to check and tell you?
    – Karan
    May 23, 2013 at 16:33
  • Yep. Can't even open a command prompt. Can you believe it?!?!? Could ask, I guess. But this is something I would like to do regularly, and I don't want to keep bugging them.
    – bob.sacamento
    May 23, 2013 at 16:35
  • Looks like there are a few good suggestions at superuser.com/questions/15596/…
    – Jeff
    Aug 15, 2014 at 21:29
  • Details of how to set up an automatic history log of login/logon, lock and logoff times are provided at the Stackoverflow answer Counting computer login times for the week
    – MechtEngineer
    Dec 30, 2017 at 11:41

4 Answers 4

Reset to default
13

I'm in the same boat as you (no command prompt) and this worked for me:

Create a new file containing the following lines:

quser
pause

Rename the file to something like "loginTime.bat" and double-click it.

This is a combination of Will.Benniger's answer on this page, and paradd0x's found here: Show Windows 7 logon time?

Improve this answer
0
7

You can try to use a batch file that would display it for you in the command prompt and pause waiting for input. This will typically circumvent the usual lazy IT method of blocking CMD.

Open a notepad document and insert the following:

net user YourUsernameHere /domain | findstr Last
pause

After, save it as logontime.bat

Double click the batch file that you saved and it should come up under Last Logon

Improve this answer
4
  • 1
    On a Windows 7 AD domain I had to add /domain to the end for this to work. You could also add "| findstr Last" to show only the "Last logon" time.
    – Dave Noonan
    May 23, 2013 at 16:52
  • Thanks for the help. Tried it. Unfortunately, it looks like our IT guys aren't lazy. It seems they mean business.
    – bob.sacamento
    May 23, 2013 at 19:14
  • And just to confirm, that's the actual last login and not the last time the screen was locked right?
    – Erikster
    Nov 24, 2014 at 21:20
  • 1
    @Erikster Just saw this when someone upvoted my answer. This is actually the initial login. I have a bad habit of perpetually hibernating my work computer so it shows my last login as a about a week ago: Last logon 2016-11-14 14:48:32
    – Will
    Nov 22, 2016 at 16:31
6

if you cannot open Eventvwr and view security logs, you will not be able to determine this. if you can, look for event id 4624. the login type param will tell you what kind of login it was. look for 2 (user login), and 7 (account unlocked; if you don't logout/shutdown overnight).

http://www.ultimatewindowssecurity.com/securitylog/encyclopedia/event.aspx?eventid=4624

Improve this answer
5

The method described in the accepted answer does not necessarily give you the time you logged-in this morning. The method gives you the last logon event but since there can be multiple events during the same session (even if you don't logout or lock your workstation yourself) you need to get the first event of the day.

If you are not able access the security logs for the first event your chances of figuring this out may be limited.

Improve this answer
0

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .