We explain how to analyze Event ID 4624, An account was successfully logged. It records the successful logon by a user on a computer.

So, in the left pane of the Event Viewer screen, click the drop-down arrow adjacent to the “Windows Log” folder and choose the ‘System‘ icon. Next, right-click on System and choose Filter ...

Alternatively, you can use the XPath query mechanism included in the Windows 7 event viewer. In the event viewer, select "Filter Current Log...", choose the XML tab, tick "Edit query manually ...

How to see who logged into Windows 10. Once you've configured Windows 10 to audit logon events, you can use the Event Viewer to see who signed into your computer and when it happened.

If Windows 10 or an app isn't behaving as expected, you can use the Event Viewer to understand and troubleshoot the issue, and in this guide, we'll show you how.

You can track recent shutdowns by creating a Custom View and specifying Windows > System as the Event log, User32 as the Event source, and 1074 as the Event ID. More Windows how-to’s..