net user /domain | findstr /B /C:"Last logon"
или посмотреть ивент логе,
How can I: Access Windows® Event Viewer?
1. Press Win+ R and type “eventvwr.msc” and click OK or press Enter.
2. Expand Windows Logs, and select Security.
3. In the middle you’ll see a list, with Date and Time,Source, Event ID
and Task Category. The Task Category pretty much explains the event,
Logon, Special Logon, Logoff and other details
