4
2
Looking at the answers and comments to this question, it seems that user log-ins can be monitored by checking for Event ID 4624 in the event logs.
Is there a way (through event logs, group policy, or other mechanism) to get Windows to display an alert (e.g. a popup or message in the notification area) when someone logs into the local machine?
Note: there is this other question (but it is about connecting to a shared folder remotely) and this question (which does not specifically ask for any alert mechanism).
1Is there a way out of the box: NO However, that does not stop a third-party from writing software that is a watchdog and displays a notification when said event does happen. Of course from a security perspective it is far easier to disable remote access then to write software to notify you when it happens. – Ramhound – 2015-10-21T16:48:47.040