If you find multiple 4624 ID that means your system is logged On many times.
Therefrom top start searching event with Event ID 4624, which is actually user logon event ID. Then on the middle pane, you will get the list of events related to user logged and resource access information. Among them just click on " Security", which is in the second position from the top. Then on the left pane, double click on " Windows Logs".There you will find 5 lists.
You will get Event Viewer Windows as shown below. Windows 10 user login history using Event ViewerĬlick on the start button and type " Event Viewer" in the search box and you will see Event Viewer at the top of the list. So without wasting time let's check windows 10 user login history step by step: 1. Here, in this article, I am using windows 10 Professional Editions.ī) We can't tell you "who" actually logged in the system but can actually tell you at what time and date login is done. Note that : a) Logon auditing will only work on your Windows Professional, so if you have a home edition of windows, you can't use it.