At work, a user sees that someone accessed a file on her computer in the late afternoon. We were all off by the time the file was accessed. We are on a domain. Is there any way to tell when a user logged into that XP machine? According to the Microsoft site, we should have access to that information via the event viewer. Her event viewer has only one entry, and that one is more than a year old.
Is there another way to track this and is it possible to find this information in the active directory?
Any and all information will be greatly appreciated.