I'm an accountant by trade and am trying to understand what the term LogonUI.exe file is in general terms. Also, if an employee has that file does that mean he was logged in at his computer? For instance, the employee has a LogonUI.exe file with the time of 7:56 a.m. However, our records indicate he got in at 8:32 a.m. His claim is this file proves he was in earlier than 8:32 by using this file as proof. Can anyone help? Thanks.