Windows event viewer : Go to Start, then type Event Viewer, double click on EventViewer.
Scroll down and look for an Event ID of 4624 and Logon Type ID of 10
Double click on an event to see the Logon Type.
To find the Wan IP address of the Remote computer, scroll down to Source Network Address.
Event Log Explorer : http://www.eventlogxp.com/
I found this neat program that displays the event log with a quick browse feature.
You can also create some Custom Columns : http://lozaelec.blogspot.com.au/2015/07/event-log-explorer-custom-columns.html
30Days Trial and free licence available or pay for a full licence
My Event Viewer : http://www.nirsoft.net/utils/my_event_viewer.html
No comments:
Post a Comment