Stack Exchange Network
Stack Exchange network consists of 181 Q&A communities including
Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.
Visit Stack Exchange
Super User is a question and answer site for computer enthusiasts and power users. It only takes a minute to sign up.
Sign up to join this community
Anybody can ask a question
The best answers are voted up and rise to the top
13 years, 3 months ago
Is there a way to get a list of the users that logged in last on a Windows XP machine.
What I want is basically what the unix command
last does on windows.
The machine is in a domain, I have local admin rights.
EDIT: The answers from Chris, Molly and Nate were all correct and helpful. What solved my particular problem was the answer from Nate, so I accepted his answer. Thank you guys.
Mar 2, 2010 at 14:34
214 5 5 silver badges 11 11 bronze badges
You could have a look at the modification times on the profiles, that might be more useful.
Have a look for "User profiles" in the properties of the machine (right near where you'd set Environment Variables).
Mar 2, 2010 at 15:43
221 1 1 silver badge 2 2 bronze badges
If you have XP Professional you can always use the Event Viewer found under Administrative tools. With the event view up and running you can click on Security and see which user logged in at what time.
Hope this helps some.
Mar 2, 2010 at 14:52
1,748 2 2 gold badges 15 15 silver badges 15 15 bronze badges
You can audit the logon attempts via Group Policy:
Log on as an administrator
Start, click Run, type mmc /a (note the space between mmc and /a), and then click OK.
File menu, click Add/Remove Snap-in, and then click Add.
Snap-in, click Group Policy, and then click Add.
Select Group Policy Object, click Local Computer, click Finish, click Close, and then click OK.
At this point, you might want to save this console for further use. Note: you can add multiple snap-in and manage multiple computers from this console.
On the left hand side, navigate to
Local Computer Policy > Computer Configuration > Windows Settings > Security Settings > Local Policies > Audit Policy
On the right hand side, double-click "
Audit Logon Events"
Check the boxes for
Success and Failure, click OK
Now anytime a logon is attempted an entry will be created in the
Security Log, which you can view with the Event Viewer.
Mar 2, 2010 at 15:11
By clicking “Accept all cookies”, you agree Stack Exchange can store cookies on your device and disclose information in accordance with our
Accept all cookies
Necessary cookies only