for those of you who are in the know about networks (in this case Windows 2000 server environment)....here at work an employee guessed someone's password and logged in as them and possibly looked at files they werent supposed to. of course i need to find out if she did indeed login to this particular pc.
i looked at the event viewer at the Security Log, but it only shows the server name under the "Computer" column. i want to know what computer she logged into, on a certain day. is there a way to tell this from the server?