How can I figure out when an user has last logged out? The user folder?

0

In C:\Users, does the date last modified of the user's profile folder equate to the last day they logged out?

Steve

Posted 2011-06-22T05:28:04.233

Reputation: 2 473

My user folder says that I have last modified it some hours ago, while I did my last reboot an half hour ago. No. – Tamara Wijsman – 2011-12-27T03:13:46.710

Answers

2

In the event viewer, go to the Security log in the Windows Logs. Here, look for events that are in the Task Category called Logoff. More specificall, events with ID 4634 are Logoff events.

You can create a new Custom View and filter by that event ID if you want to gather them together.

Tamara Wijsman

Posted 2011-06-22T05:28:04.233

Reputation: 54 163

1

No. Use the Security event log to check this instead.

kinokijuf

Posted 2011-06-22T05:28:04.233

Reputation: 7 734

Thanks. I guess the folder's modified date does not correspond to the modified date of the folder's contents. – Steve – 2011-12-27T03:03:31.007

What event log in particular? What event? – Steve – 2011-12-27T03:09:30.493

Asked: 2011-06-22T05:28:04.233

Viewed: 803 times

Active: 2012-03-10T13:30:40.333