Logon Activity

Copper Contributor

We are trying to view when a user logged onto a computer by typing in their user name and password.  I understand that this is an interactive logon.  ATA reports the user performing interactive logons at various times of the night and on to the mail server which is unlikely.


Do I have the right definition of interactive logons or is ATA looking at something different?

1 Reply

Hi @toneyrome ,


Yes, you have the right definition.  Interactive logon a.k.a. logon locally is an account logging on via the console or performing a runas.