IP address of each user login


i had strange trouble server restarting itself. upon further review, user account doing reboot. problem more 1 person has login information. have changed password no 1 has , reboots have stopped.

my question how can ip address of person logging in, regardless of user account? keep in mind i’m talking past logins (i.e. 2 days ago). ideas?

hi,

what's your environment ?

if have timestamp of event log 1074 (which identify username triggered reboot), then navigate security logs , find logs during time span of 1074 event trigger.

you can find logon events ip address there.


devaraj g | technical solution architect



Windows Server  >  Directory Services



Comments

Popular posts from this blog

Motherboard replacement

Cannot create Full Text Search catalog after upgrading to V12 - Database is not fully started up or it is not in an ONLINE state

Remote Desktop App - Error 0x207 or 0x607