I had some strange trouble with the server restarting by itself. Upon further review, a user account was doing the reboot. Problem is more than one person has this login information. I have changed the password so no one has it now and the reboots have stopped.
My question is how can get the IP address of the person logging in, regardless of the user account? Keep in mind I’m talking about past logins (i.e. 2 days ago). Any ideas?