Ever wandered who logged on and when on a windows PC or server ?
This is not enabled by default, here is how to enable it :
- Type gpedit.msc
- Navigate to the following folder: Local Computer Policy –> Computer Configuration –> Windows Settings –> Security Settings –> Local Policies –> Audit Policy.
- Double click the auto logon events
- Enable both
- You can view all those extra events from now on in the event log under : ID 4624