Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

How can I tell if a somebody used the login 'Accounts' today to log into a pc in my Active Directory domain? It seems to be causing errors if 2 people are logged in using the same username and I don't know if this is the case or not.

share|improve this question
up vote 7 down vote accepted

To see the last time a particular account has logged in to your domain, you can run the net user command via a command prompt. Syntax is as follows (without the brackets):

net user [username] [/domain]

That will return several pieces of information, including Last logon time.

share|improve this answer
so i would put net user accounts /myersclark ans sorry is there a way it would tell me what computer it was logged into? – ben950 Jun 13 '11 at 14:47
No, you would put: net user accounts /domain – Don B. Jun 13 '11 at 14:49
it will not let me vote up i will do when i get enough points – ben950 Jun 13 '11 at 15:03

With Active Directory a user can be logged into different workstations without causing problems. What are the issues you are seeing? If you have the proper auditing on your DCs you could search through the event logs for login events for that user.

A more accurate answer could be given if you provide more information on what OS you are running on your DCs and what Domain & Forest Function level you are running.

You could also use the Lockout Tool to search the username if your problem is related to the account getting locked out. It will search the event logs for bad logon attempts on the DCs and show you the most recent attempt.

share|improve this answer
sorry i dont no what a forest function is. my domain in called myersclark and it is run on a server 2003. i have software that runs on my printers so when u scan a document it sends it to the computer where the person is logged in. i have a tempory account called Accounts and when i scan something half of the document appears and the other disappers which makes me think that there are 2 users logged in useing this so i was wondering if there is say a log of when users have logged in – ben950 Jun 13 '11 at 14:34
You would need to look through the Security event log on the DC of your domain for login events. However, to test you could reset the password of that account so only you know it, or create a new temp account and test with that one. – HostBits Jun 13 '11 at 14:45
it will not let me vote up i will do when i get enough points – ben950 Jun 13 '11 at 15:03

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.