Resolved Determining who logged into a computer in the past?

A couple of computers on the network were found locked by a user who hasn't been on-site for quite some time. These computers also don't get used very often, so it's understandable to see how they might have been locked.

As a curiosity, though, how can I find out when this person (or anyone, really) logged into this particular computer?

I thought it would be under event viewer, but I'm not seeing any notifications that provide the information I want. Maybe I just don't know what I'm looking for/at?

 

This program will allow you to analyse the index.dat files, showing the activity of users.

Download the free version of Index.Dat Analyzer, here

To run it, click the drop down box alongside Location to select an index.dat file to interrogate. Then click a relevant heading, e.g. click ‘Accessed’ to sort the entries into date sequence. To examine shared network files, click the green plus sign to navigate. Entries can be deleted by putting a tick alongside the entry.