How to Check Recent Login History on Windows Cloud Computer

Overview

Windows records successful and failed login attempts in the Security Event Log. Administrators can review these events to determine when users have accessed the cloud computer and to identify potential unauthorized sign-in attempts.

---

Prerequisites

• Administrator access to the cloud computer
• Access to Event Viewer

---

Steps

1. Sign in to the cloud computer using an administrator account.
2. Open Event Viewer.
3. Navigate to:
   Windows Logs > Security
4. In the right-hand panel, click Filter Current Log…
5. In the <All Event IDs> field, enter:
   • 4624 for successful login attempts
   • 4625 for failed login attempts
6. Click OK to display the filtered results.
7. Double-click any event to view detailed information such as:
   • Username
   • Logon type
   • Date and time

---

Notes

• Event ID 4624 indicates a successful logon.
• Event ID 4625 indicates a failed logon attempt.
• Failed logons can help identify potential unauthorized access attempts.
• Security logs may be cleared depending on local retention policies, so older events may not always be available.