Hello,
I work for a K-12 school district that is fairly new with SCCM. It is fairly common for us to have a need to know user logon history for a computer, if it is brought to our attention that a student was using a computer to do something inappropriate. Eg. hacking, installing software, looking at or creating explicit content, etc. A typical scenario would be that a student brings a laptop to a teacher complaining that they found something bad that was done by someone using the laptop before them in an earlier class period. We are looking for a quick and easy way for helpdesk and/or first tier support to get information about who was using the computer when.
Does anyone have a tip on how we can accomplish this? I was thinking maybe there is a way to create a custom report..? There is a canned SCCM report that is essentially the opposite of the information we want, which is "Computers for a specific user name: Displays a list of computers used by a single user". So there must be a way to flip that around, right?
Thanks in advance for any help anyone can provide.
