Hi guys, just a question I'd like to ask. Is there a way to check who logged in at what PC and when he did? Or like the last 10 users who logged on to the machine and when. Its a domain enviroment so we got unique login IDs.

Sorry if this is confusing I'll try to ask in a different manner if its not understandable, please help, thanks.

Do the following:

1. Click "Start" --> "Run" and type in secpol.msc. Click "OK".
2. Once "Local Security Policy" is open, navigate to "Security Settings" --> "Local Policies" --> "Audit Policy".
3. On your right pane, double-click on "Audit account logon events". Then, place a checkmark on the "Success" and "Failure" checkbox. Click "OK".
4. Do the same for the "Audit logon events".
5. Now that everything has set up, you can see the event log via Event Viewer. What you need to do is go to "Start" --> "Run" and type in eventvwr.msc. Click "OK".
6. You will be presented with a Event Viewer window. Now, navigate to "Security" and you may see the login ID being recorded for each of the users that logon.

Great! Thanks man, works like a charm. However, the check boxes are greyed out and I cant make any changes to it, fortunately its already ticked. Anyway idea how to make the check box clickable?

bro...
but it doesn't record from which IP does the user's came in
any idea?

If you have firewall, check from firewall log files