Contractor’s friend – keep track of when you logged in for timesheet reasons
I can’t forget how many times I got excited about some task that I forgot what time I started it. Well , its best to error on being conservative when you are billing the client OR best to error on using hints of when you logged in! Using event viewer, you can see when you last logged in to that computer. This is the filter for checking those logs – I created a custom view and named it “When I logged in”. The username in the top section isn’t relevant so if you are checking this for your username – its a little further down.
<QueryList>
<Query Id="0" Path="Security">
<Select Path="Security">
*[
(System[EventID=4801])
or
(
System[EventID=4624]
and
EventData[Data[@Name='LogonType'] != '5']
and
EventData[Data[@Name='LogonType'] != '3']
)
]
</Select>
</Query>
</QueryList>