How can you find out who has logged into a NT/2000 computer. If you have the workstations set up not to cash any accounts then they have to authenticate at the domain controler which will do the logging. BUT I'm suspecting one of our users has made himself local Admin... therefore how can I find out who was logged in and when localy.