logon logoff time

[czerny]

Hallo,

I have the problem to find information about the time where my computer has booted and shut down last.
It would be best, if I could find these infos not only for the last time, but for the last 40 days.
As an alternative the logon/logoff times of a certain user would be also ok.

Any ideas?

czerny

[frankie]

The event log could be a good  start point...
To nable auditing for system events (startup and shutdown) use the group policy editor (open gpedit.msc form a system consolle, go to Security Settings - Auditing, add the required events).

[czerny]

This could be a solution for the future, but I am locking for login times of the last 40 days.

[frankie]

Take a deeper look in event log, even if booting and logging are not expressely available you can get information studying the events. I.e. if a block of services starts together this would indicate with high probability that the system was booting up.
I don't know if your event log covers 40 days, but normally it holds many weeks (depend on how many events you got....).

[czerny]

There was the small hope, that there is a better source of information.

Thank you, czerny