Yes it is possible. But first you have to enable it in your group policy.
- Press Win + R and enter
gpedit.msc
(folowed by pressing return)
- Click through the following tree:
Computer Configuration → Windows Settings → Security Settings →
Local Policies → Audit Policy
- On the right panel double-click Audit logon events
- Mark Success and Failure (if you want both to be logged)
- Confirm those settings by pressing the OK button
You can now find your Audit Failure and Success entries in your eventviewer:
- Press Win + R and enter
eventvwr
(followed by pressing return)
- Open the Windows Logs Tree and click on Security
There you will find all entries.
You can also create a filter to only show your successful and failed logon attempts:
- On the eventviewer click on Filter Current Log...
- Change
<All event IDs>
to 4624,4625
The eventID 4624
shows your successful attempts, thereas 4625
shows the failed ones.
Remember: you will only find those attempts being logged since you've changed the group policy! So you can't see it for the past.
Sorry, but he can't find gpedit.msc. – H. Pauwelyn – 2015-09-11T08:42:12.303
1
Ah you are using the home version... There is no group policy editor included. However you can install it. You can find a how to on the following page: http://www.askvg.com/how-to-enable-group-policy-editor-gpedit-msc-in-windows-7-home-premium-home-basic-and-starter-editions/
Even though it's saying that it's for Windows 7 it should be working on Windows 10 too.
Is Local Security Policy [
secpol.msc
] also not included in Home? If it is, Security Settings - Local Policies - Audit Policy – JW0914 – 2017-07-12T05:16:52.677