1

I suspect someone is login into my computer when I check event viewer. Is it possible to have a script on windows 7 to record every login onto my windows 7 desktop pc?

user221459
  • 11

2 Answers2

2

Windows already can do this using the MMC module. But if you do not trust it, you can add an autorun to your profiles that does this 'logging'

LvB
  • 194
1

Try WinLogOnView

Windows already logs this into the security log.

There is a nice freeware GUI: NirSofts's WinLogOnView

StackzOfZtuff
  • 1,540
  • why use a 3rd party app when the MMC enables you to see this already? – LvB May 22 '15 at 14:06
  • Because the security log has too much throughput. It is unreadable to me. Even on my single user machine. There are currently 21k events. (~20MB) WinLogonView parses this into just 105 sessions. And it also calculates session duration. (Which eventvwr.msc does not, I think.) – StackzOfZtuff May 22 '15 at 14:22
  • Learn to use the filters, instead of relying on external tools that you have no knowledge about how it works , or what data it sends to 3rd party (or worse what security holes it opens) – LvB May 22 '15 at 14:23
  • Sure. But the VirusTotal report of my WinLogonView.exe is clean. And NirSoft has been around for long enough for me to trust them. Worth the risk to me. – StackzOfZtuff May 22 '15 at 14:26