大多数情况下，与他人共享一台电脑很好，但如果你怀疑有人在背后登录你的帐户，你该怎么办？你如何发现或检查，看看是否有人成功地泄露了你的帐户？

今天的问答环节是由SuperUser提供的，SuperUser是Stack Exchange的一个分支，是一个由社区驱动的问答网站分组。

问题

超级用户读者Erel Segal Halevi想知道是否有办法查看某人是否在Windows中登录了他的帐户：

In Windows 7, is there a way to know if somebody has logged into my account when I was absent?

Specifically, is it possible to know if a person with administrator privileges somehow logged into my account (i.e. in order to get into my e-mail, etc.)?

有没有一个简单的方法，埃雷，以找出是否有人已登录到他的帐户？

答案

超级用户contributor Pathfinder为我们提供了答案：

Recommended Method:

1. Press Windows Button + R and type “eventvwr.msc”.
2. In the Event Viewer window, expand Windows Logs, and select Security.
3. In the middle of the window you will see a list with Date and Time, Source, Event ID, and Task Category columns. The Task Category pretty much explains the event: Logon, Special Logon, Logoff, and other details.

The events will be called Audit Success. The Task Category you will be looking for will be “Logon”.

You will have a bunch of system logins. They are normal.

What you will be looking for: Event ID 4624 (successful log***).

Under the General Tab in the area below the list, look for NEW ID, and ignore “SYSTEM”.

Logs to ignore (unless a virus login):

An indication of a login will look like this (Windows 8.1), but will probably be different in Windows 7:

对于那些对Windows7版本的外观感兴趣的人来说，这里有一个单独的用户帐户。

岩谷Akemi截图。

有什么要补充的解释吗？在评论中发出声音。想从其他精通技术的Stack Exchange用户那里了解更多答案吗？在这里查看完整的讨论主题。