IP address of each user login
i had strange trouble server restarting itself. upon further review, user account doing reboot. problem more 1 person has login information. have changed password no 1 has , reboots have stopped.
my question how can ip address of person logging in, regardless of user account? keep in mind i’m talking past logins (i.e. 2 days ago). ideas?
hi,
what's your environment ?
if have timestamp of event log 1074 (which identify username triggered reboot), then navigate security logs , find logs during time span of 1074 event trigger.
you can find logon events ip address there.
devaraj g | technical solution architect
Windows Server > Directory Services
Comments
Post a Comment