They are logged in event viewer.
Start -> Run -> eventvwr.msc
Click on Application and select the most recent winlogon entry.
They are logged in event viewer.
Start -> Run -> eventvwr.msc
Click on Application and select the most recent winlogon entry.
Open Event Viewer
Click ‘Action’ > ‘Create custom view…’
Check the ‘Error’ and ‘Information’ from Event Level
Change the Event logs dropdown menu to ‘Windows Logs’ > ‘System’
Type ‘12,6008’ without quotes for EventID
Click ‘OK’