General discussion

Locked

Audit user account

By wrhale_1 ·
I have 2 'remote' users that I want to audit their logon and logoff times to the network. They have to authenticate to our SBS server via VPN to logon. I do not want to waste cpu time on auditing all users logon/logoff events. Thanks for help.

This conversation is currently closed to new comments.

3 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

by Joseph Moore In reply to Audit user account

The last logon/logoff times for each user account are automatically recorded per domain controller in a Windows domain.
The best tool I know of to get this info is Dameware NT Utilities (also Win2K compatible).

www.dameware.com

You can select a Domain Controller in your domain, open up the Users container, then right-click the user account in question and choose Login Times.

A window comes up, listing the last logon and last logoff time for that user account on that domain controller. YOu would then click the Check All DCs button, to get the times for this user on all domain controllers in that Windows domain.

No special auditing necessary. This info is saved in the SAM for each user.

hope this helps

Collapse -

by wrhale_1 In reply to

Thank you for your help, but NG. User is a remote office that connects via VPN, and regular auditing (even w/Dameware does not work.

Collapse -

by wrhale_1 In reply to Audit user account

This question was closed by the author

Back to Windows Forum
3 total posts (Page 1 of 1)  

Related Discussions

Related Forums