Discussion Locked

Audit logging on and off

0 helpful
8 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
How can I audit logging on and logging off of the users in my domain? How can I do that and see it in the event viewer?

8 replies

by fenaikh

Hi

You need to use USRMGR and enable Audit for Successful Login and Logout on your domain. This will then write info to your Event Viewer Security Log

Good luck

Mohamed

by jeremy the it guy

You need to go into the Group Policy Snap-In under the MMC. Type MMC at the Run prompt. It will bring up a blank MMC. Go to Console>Add/Remove Snap-IN and add in Group policy. From this policy, you can alter many things and one of them is to audit logons and logoffs. YOu can also do this on each machine with the Local Policy Snap-In. To set this up, when you add the Group Policy, it's going to ask you to browse to the object you want this policy to pretain to. In your case, it would be the whole domain. Once you do that, open the Group Policy, go to Windows Settings, Local Policies, Audit Policy. From here, you can set up auditing. Hope this helps, Jeremy

by joseph moore

Since you are running 2000, then you are running Active Directory. You can set up a Group Policy to audit logons and logoffs. Push the Group Policy to your domain. Then, you will have this information written to the Security log in Event Viewer on your domain controllers.
But setting up the Group Policy is first.

This discussion is closed to new replies.