Endpoint Protection

Hi,

I've been looking around the SEPM for this information, but I can't seem to find it, is this possible anyway? I've been also looking at  the sql database tables, and I can't see any column about the last login time. Maybe I'm just missing something?

Thank you,

It's not possible but you can check below SQL query

See sql query

Compilation of SQL queries to the SEPM database

https://www-secure.symantec.com/connect/articles/compilation-sql-queries-sepm-database

Please check the Audit logs in SEPM.

I'd just checked it, there's no Last Log on time, I also Check the SQL DB Table for the Audit Log, same no column for Last log in. Anything Else I can look for?

Check the brian comment

SEPM computer status report will show who is logged in at last check in to the SEPM but not who was last to log in. There is no sql query as well for SEPM

https://www-secure.symantec.com/connect/forums/last-logon-user-report

This report you can have to find it in ALtiris Server

Report location

Go to the Report->All Report->Discovery and Inventory->Inventory->Cross-platform->
User ->Local User Account Information

https://www-secure.symantec.com/connect/forums/last-logon-user

Go to ADMIN page and highlight the name of the administrator for which you want to check the last logon time or the last logout time. The time will be displayed in the right side. However, you might has to check each user to find out who logged in  or logged out last.

EDIT: Is this query about users logged on to SEPM console or on client computers? The above step is to find the logon details on SEPM console for audit purpose. If you need it for client computers, the logon time details are not captured in SEPM logs.

If you want to know the logon time and user of the clients see Sumit G's answer. But if you want to check the logon times of SEPM admins, go to Monitors > Logs > System/Administrative.

We're talking about login time of the users who logged on the computers with SEP agents, not the the login time of the admins on SEPM.