How to find out if someone is logged in locally

Associate
Joined
18 Oct 2002
Posts
797
Location
Manchester
Win 7 PC whilst I appreciate this can be done by GP and various other network methods be it remote etc

However my son has been accused of walking out of work at 12.00 when he defiantly was logged in to his PC and was working and is now about to receive a warning- the downside is he is self -employed and working on a fixed term contract.

Is there any local cmd that will allow him to see(hopefully from the PC he is using) but most probably from another PC when he was logged on and at what times he logged off/on

If anyone can help can they put the exact syntax he would need as his knowledge of the cmd prmpt is limited.

Thanks
 
Thanks for the info however as he is a contractor I dont think they will allow him to prove his innocence by getting the IT Admin involved... which I think i am correct in saying is the only real way of looking at the logs.
 
Thanks for the info however as he is a contractor I dont think they will allow him to prove his innocence by getting the IT Admin involved... which I think i am correct in saying is the only real way of looking at the logs.

That's correct. Tell them they need to prove he wasn't in. If he knows he was in 100% and not lying take it to a solicitor. There may be other reasons they are doing this.
 
Last edited:
Does he have an Android phone?

Open up Google Maps, press the 3 lines in top left, thenYour timeline.


Also, if you open up Event Viewer (start, run, eventvwr), then go to..

Windows Logs\Security

In Here it will show log on / off events. Lists the username too.

What about modified time on files that he was working on? They can look through backups to check them.
 
Does he have an Android phone?

Open up Google Maps, press the 3 lines in top left, thenYour timeline.


Also, if you open up Event Viewer (start, run, eventvwr), then go to..

Windows Logs\Security

In Here it will show log on / off events. Lists the username too.

What about modified time on files that he was working on? They can look through backups to check them.

Sorry for late rep[y - you know when you know the answer but cant think of how to get there? Well you have given me the answer he checked event viewr and matched it up with his ID and stuck it to them - except now they arent playing ball, probably because they didnt expect him to come up with futher evidence that he was on site - pllus he also told them he would shop them for falsifing documents in respect of the time sheet they had signed to say he had worked all week- when now they are accusing him of leaving before his sheduled finish time

Anyway Thank You
 
A few questions
how big is the company (do they have a proper HR dept)
what does his contract say with respect to disciplinary action
what does his contract say about early termination of contract

Also read this
 
Back
Top Bottom