Ask Leo!

Can I monitor who's using my machine?

Home » Video Tips
Home » Windows » Windows Programs

Summary: Windows XP includes a useful utility to monitor exactly what programs are being run on your machine. It's easy to enable, and easy to see the results.

Can I monitor who's using my machine?

There are lots of tools out there that will allow you to monitor not just who's using your machine, but what they're doing, even typing, when they do. That's called spyware, and requires installing additional software to be installed to log and report the activities.

What many people don't realize is that there are some simple logging tools built into Windows XP already. They won't log keystrokes, but they will at least let you see who's logged into your machine and what programs they ran while they were there.

It's off by default, but it's easy to turn some of that logging on.

The settings are buried a little deep: Start, All Programs, Accessories, Administrative Tools, Local Security Policy. Once that's opened up, look underneath Security Settings, expand Local Policies by clicking on the boxed plus sign next to it, and then click on Audit Policy.

There are several items of interest here, but we'll focus on only three. Start by double clicking on Audit account login events. Make sure that both success and failure are checked, and press OK. Repeat for Audit logon events. Those two will log when someone logs into your computer or tries to connect to your computer via a remote share. Now repeat the process for Audit process tracking - this one will log an event each time a process (program) starts or stops.

Now close Local Security Settings.

Use the event viewer to see the results of the logging we just enabled.

Press Start, Run, and type "eventvwr". Click on the security item in the left hand pane. In the right will be a list of security events, most recent at the top. Double click on one for the details of that event. In the case of a login event, for example, you'll see the account used as well as the date and time of the event. In the case of a process event, you'll see the name of the program that was run as well as the account that started it.

Video: This short video shows the steps I've outlined above.

Related:

Article 346 | Posted June 26, 2004

Recent Comments

I have Windows 98SE and want to know how I find out who keeps getting into my Yahoo, and Outlook Express 6 and sending out mail as me. It has to be someone I know because they got into both accounts, and I regularly change passwords. Both accounts send mail to the same names also.
I want to catch them red handed. I also suspect my daughters boyfriend is signing me up for all kind of rude sites and mail, and I would like to know if there is a way to hack his account on yahoo and change his settings so I can get a little pay back

Posted by: MC at September 16, 2004 10:07 AM

You might check this article: http://ask-leo.com/someones_sending_from_my_email_address_how_do_i_stop_them.html

Posted by: Leo at September 16, 2004 11:31 AM

How can I monitor who's logging on to my hotmail account?

Posted by: Sally at January 23, 2006 02:27 AM

To the best of my knowledge, you cannot. If you suspect a problem, change your password.

Posted by: Leo A. Notenboom at January 23, 2006 03:04 PM

I see a lot of internet activity on my cablemodem even when nobody is using my computer. How can I see internet traffic in my computer?

Posted by: Haydee at December 2, 2006 02:04 PM

how do i monitor activity on my yahoo account? like dates and times when i logged on

Posted by: nikki at January 21, 2007 10:45 AM

I tried to foloow this but I dont have nothing that says administrative tools where ya said to go too. On my other comp which is a compact presario, I have a hp Web Helper Notepad, that is in my computer-cdrive. But yet I dont have it on my emachine one. It helps me to keep track of where my kids are going on internet and shows all pages visited and what it was they visited. Am trying to find same thing for my emachine as well, that I can personally put in and use same way without haveing to buy something in its place I really like it can you help me to find same thing for the emachine?

Posted by: Robin at October 1, 2007 11:38 AM

Post a comment on "Can I monitor who's using my machine?":






(Email Address will not be published.)

Remember Me?

By popular demand...
my tip jar
Cuppa Joe
Buy Leo a Latte!

(you may use HTML tags for style)

New!

RSS feed Subscribe to the RSS Feed specifically for comments on this article.

Before commenting, please...

Please wait. Your comment is being processed ...


Ask Your Question:


ask-leo.com
Web

Stay Informed

Weekly Newsletter

Archives

By Category
By Date

Advertisers

Advertise on Ask Leo!

««   »»

Question? - Ask Leo!
Who is Leo?
Link to Leo!

Terms, Conditions & Privacy