How to Find Out the Last Login Date For a Windows 2000 Server

Developed by Microsoft, the Windows 2000 Server operating system shares the same user interface as other Windows 2000 software, but provides additional components that support server-specific protocols and applications. The system automatically tracks most major user and system actions, and includes a helpful utility called Event Viewer that allows you to visually review this data. Once you know where to find this utility and sort the data it contains, determining the most recent login date for Windows 2000 Server becomes a quick task.

Instructions

1. Click the Windows "Start" button and select "Programs," followed by "Administrative Tools" and "Event Viewer."

2. Single-click the "Security Log" item on the left side of the program window.

3. Look to the right side of the program window. All security-related events are listed, with the most recent events placed at the top of the list.

4. Scroll down through the list of events until you reach an entry with "Logon/Logoff" listed as its category and "528" listed as its event code. This event represents the most recent login. The date and time associated with the event are listed below the "Date" and "Time" columns.

References

• Microsoft TechNet: Tracking Logon and Logoff Activity in Windows 2000
• Microsoft TechNet: System Event Viewer Tips
• Windows Networking: Security Events Logon Type Definitions
• Microsoft TechNet: Event Viewer Screen Image