This is how to see logon/logoff on your computer. Save as LogonLogoff.vbs
'*******************************
Set objLogParser = CreateObject("MSUtil.LogQuery")
Set objInputFormat = CreateObject("MSUtil.LogQuery.EventLogInputFormat")
Set objOutputFormat = CreateObject("MSUtil.LogQuery.DatagridOutputFormat")
strQuery = "SELECT ComputerName, TimeGenerated AS LogonTime, STRCAT(STRCAT(EXTRACT_TOKEN(Strings, 1, '|'), '\\'), EXTRACT_TOKEN(Strings, 0, '|')) AS Username FROM Security WHERE EventID IN (552; 528) AND EventCategoryName = 'Logon/Logoff'"
objLogParser.ExecuteBatch strQuery, objInputFormat, objOutputFormat
'********************
Jerome