I've never been clear about the last command. My memory is that it recorded logins to the desktop as well as to ttyn devices. Today, I'm checking my logs, and I don't see any record of logins to the desktop unless the user also started a shell in a virtual terminal.
Has this changed recently? I'm I imagining things? Is there some setting that changes this, that might have changed when I upgraded from squeeze to wheezy?
--
Joel Rees