Find out Who logged your PC when you were not around

We ofter keep on wondering who is using our system often in your absence. Windows 8 comes with a feature which records every activity be it your logon or other activities on the system. You can also determine the last usage of your PC or shutdown time. This feature helps in determining when was the system accessed even when you were not around. In this article we will be discussing about how to have a close watch on the activities taken on taking place on the system. disk management windows 8

Recording Windows activity is only availed with Windows 8 Pro only. HereĀ  is how you can make use of event recorder. Follow he steps described below to determine logon and activities carried on Windows 8 system.

Steps to Record Events in Windows 8

This procedure involves activation of logon event audit. To do so, follow the steps given below

  1. Open Run dialog box using Windows + R and type in gpedit.msc and hit Enter. This will open Local group Policy Editor
    In the Group Policy editor, expand Computer Configuration > Windows Settings > Security Settings > Local Policies > Audit Policy

local-group-policy-editor

  1. In the right pane, double click on the policy audit logon events option
  2. In the next window that opens i.e. logon event property window, check the success and the failure option
  3. Finally hit the Apply button and save the settings.

Upon setting this, Windows will start recording every log event including some basic details. Next, view the recorded or logon events so that you can find out when was your system logged in your absence.

Steps to View Logon events in Windows 8

  1. To view the recorded or the logon events, Open charms bar using Windows + C and hit the search charm and search for view events. Type in view events log and from the search result open it.
  2. In the Event log viewer, navigate to Windows Logs > Security category. Here look for all the events with event ID 4624. This ID is for all events corresponding to successful logon event
  3. To view details of the logon event like username, logon date and time, etc, double click on it.

This was how you can record and view who used your PC in your absence without using any third party application. All you need to do is to start recording logon event and sort the event IDs to easily view all the logon events in Windows 8.

Upon following the steps described in this tutorial you can now easily Find out Who logged your PC when you were not around.

Advertisement

No comments yet.

Leave a Comment