I've been asked if it is possible to see if a specific user logged into the network on a specific day. I've looked through the security logs on my DC, through Event Viewer, and I see a handful of entries for this user. Is there a specific Event ID for authenticating to the network, versus authenticating to a network resource? For instance, there's a handful of entries for one of our developers, all saying Account Login, for today, but he left his machine on all night, and unlocked it this morning, so he hasn't logged into the network at all. What is the best method of doing this, or better yet, what is the best way of setting it up to capture this information, if possible. Joe Heaton AISA Employment Training Panel 1100 J Street, 4th Floor Sacramento, CA 95814 (916) 327-5276 [EMAIL PROTECTED]
~ Upgrade to Next Generation Antispam/Antivirus with Ninja! ~ ~ <http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm> ~
