Finding out the computer a user logged

Re: Finding out the computer a user logged

You might try filtering for that username. You can do this by right-clicking on your domain controller(s) and choosing Events->Filter Events. I would try User/Group and if you don't come up with anything there, then try the Description field.

[igorbr]

Hi,

How can i find out the computer a user has logged on? A have a remote user in which his machine was removed from the domain (somethign weird happed with its OS) and I don't know the machine's name to retrieve its admin local password. Is it possible to retrieve from the event viewer of a DC?

Thanks ,

Igor