Discussion Locked

monitor workstation logon?

0 helpful
5 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I need to monitor logon activity on 2 machines. What is the easiest way to do this?

5 replies

by mike mullins

Verify the event logging service is enabled on both machines and monitor their logons remotely thru your event viewer.

START > RUN > eventvwr \\COMPUTERNAME

Good Luck
0bytes

by gigelul

If you want to see who was logged and on what machine check in event viewer \ security.log on your PDC or BDC for events with ID 528 and 538. Here you can apply filters per machine, user, event ID, etc.

Also you can build your own tool with from resource kit which can export all events or only some that you want, to a text file. Open in excel or access apply filters or queries.
Hope this help

This discussion is closed to new replies.