I get into work anywhere between 8:00am and 9:30am. As the end of the day draws on, I’m sometimes not sure whether I’ve served my time. To make sure I don’t go home too early, I use this little trick.
Windows tracks your logons in the event log. So to find out when you came in;
- Open the event viewer; *windows+r, ‘eventvwr’, enter*
- Select ‘Custom Views’
- Right-click and choose ‘Create custom view…’
- Open the ‘XML’ tab
- Check ‘Edit query manually’
- Enter this XML;
<Query Id="0" Path="Security">
<Select Path="Security">*[System[(EventID=4672)] and EventData[Data[@Name='SubjectUserName'] = 'your-name-here']]</Select>
- Replace ‘your-name-here’ with your domain username
- Choose ‘OK’.
- Set the name to ‘Logins’
- Hit ‘OK’.
And there you go. There in Custom Views will be a list of your login events. Find the earliest one in the day and that’s when you first logged in.