A. If you type

C:\> net statistics workstation

from the command prompt it will show you the time the workstation service started which does NOT necessarily reflect the last logon time as some sources would have you believe.

If you press Ctrl - Alt - Del then you will also be shown the logon date and time.

The best way is to use the Event Viewer:

  1. Start the Event Viewer (Start - Programs - Administrative Tools - Event Viewer)
  2. From the File menu select Security
  3. Look for the latest event 528 which is a Success Audit
  4. Double click on it for complete information

You will need to ensure auditing is enabled for logon success and failure

  1. Start the User Manager (Start - Programs - Administrative Tools - User Manager)
  2. Select Audit from the Policies menu
  3. Enable "Audit These Events" and select "Logon and Logoff" success and failure. Click OK
  4. Close User Manager