Windows Policy allows you to display information about the previous user logons and logon failures to the user. This enables you to check unauthorized access to your PC. This setting can be enabled using the Group Policy Editor. Group Policy Editor is available only in Windows Vista Ultimate and Enterprise version.
1. To enable this setting, Start-> Run-> gpedit.msc.
2. Navigate to Computer Configuration-> Administrative templates-> Windows Components-> Windows Logon Options. Double click the first option on the right side- “Display Information about previous logons during user logon”.
Enable the option and click OK. When this option is enabled, a message appears displaying the last logon attempted along with the user name and also the number of unsuccessful attempts on your PC.