How To See Who Logged In To Your Windows 10 PC

Editor Ratings:
User Ratings:
[Total: 0 Average: 0]

This tutorial explains how to see who logged in to your Windows 10 PC. You will be able to see the date and time and desktop name for the successful login for your Windows 10 PC. This will help you see if your account was logged in at that particular time by someone in your absence. You can also save the result as XML, CSV, and Tab delimited file.

To see who logged in to your Windows 10 PC, you need to use Group Policy and Event Viewer features. Group Policy helps to enable the monitoring of successful login events and Event Viewer records and stores those events.

In the screenshot visible below, you can see the information that my Windows 10 PC was successfully accessed on that particular date and time.

view logged in date and time

Note: Those who are running the Home version of Windows 10, they need to first install Group Policy, because this feature is not present in Home edition. If you are using Pro version of Windows 10, you don’t have to install it as it is a built-in feature in Windows 10 Pro / Enterprise.

How To See Who Logged In To Your Windows 10 PC?

Step 1: Use hotkey “Win+R” to launch Run Command. Type ‘gpedit.msc’, which is used for Group Policy, and Enter.

open group policy using run command

Step 2: When Group Policy is launched, first explore Computer Configuration, then explore Windows Settings, Security SettingsLocal Policies, and finally select Audit Policy.

access audit policy and then audit logon events

Step 3: That Audio Policy menu has an “Audit logon events” option visible on the right side. Double-click that option. See the screenshot above.

Step 4: A separate window for Audit logon events will open. There you will see “Success” option. Select that option, Apply, and then save this setting.

select success option

After that, you can close Group Policy. Now whenever someone (or you) will login to your PC, an event will be created and stored. This will help you see when your Windows 10 user account was accessed. For that, we need to use Event Viewer. So, let’s move to the next step.

Step 5: Use Search box and type ‘event viewer‘. Click on the visible result and Event Viewer window will open.

Step 6: In Event Viewer, double-click on “Windows logs” and then select “Security“.

access security

Step 7: You will see a lot of events with name ‘Audit Success’. Now it is very difficult to find the login event from that list. So, click on “Find” option visible on the left side. When Find window is opened, type ‘4624‘. This number is associated with login events.

find 4624 entries

Now it will be easy for you to access all the events with 4624 entries. Double-click on a particular event and then you can see date and time which indicates the time when someone logged in to your Windows 10 PC.

logged in event visible

You can also right-click on that particular event and click Save Selected Event option. This will help you save that event as CSV, XML, or TXT file.

The Conclusion:

Windows 10 has the feature to password protect or set PIN for your user account. Still, if you have doubt that someone would have accessed your PC, then you can try this trick. Just enable logon events using Group Policy and then use Event Viewer to check who logged in to your Windows 10 PC.

Editor Ratings:
User Ratings:
[Total: 0 Average: 0]

Leave A Reply


Get 100 GB FREE

Provide details to get this offer