Shulou(Shulou.com)06/02 Report--

Select windows event Viewer-windows Log-Security-filter the current log

Use XML to filter the syntax query and replace the default select statement with the following select statement

* [EventData [Data [@ Name='TargetUserName'] = 'tangjunyi']]

Results:

Details:

The source of the lock is WIN-I0VBNSILATT, which should be a notebook.

Reference:

Https://www.beaming.co.uk/support/it-servers-applications/how-to-search-the-windows-event-log-for-logins-by-username/

Https://blogs.technet.microsoft.com/askds/2011/09/26/advanced-xml-filtering-in-the-windows-event-viewer/

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.