carry out following to make sure that you are the only person logging on:
#
# STEP 1 *****************************************************
# RUN PowerShell as administrator
# START ORB | type POWERSHELL | CTRL+SHIFT+ENTER key combo | YES
# ************************************************************
#
# **************** NOTE **************************************
# to PASTE in powershell--
# --RIGHT-CLICK (Ctrl V does not work)
# ************************************************************
#
# STEP 2 *****************************************************
# COPY following lines; PASTE into Powershell
# Include the two EXIT statements in the copy & paste
# ************************************************************
$events = Get-WinEvent -FilterHashtable @{logname='application'; id=4101; level=4} `
-verbose:$false -erroraction:silentlycontinue
$events | format-table -property timecreated,message -auto -wrap `
> $env:userprofile\desktop\LOGONTIMES.txt
exit
exit
# ******************* THAT WAS EASY **************************
Let me know if that shows any unexpected logons.