Question

Locked

Domain Administrator's Login Logs

By barodian_da_dude ·
Hi all,

I have a task assigned about providing MY Senior officer the LOG details of ADMINISTRATOR'S LOGINS in our organization. I would like to know that how can I provide or can have LOGs of DOMAIN ADMINISTRATORS from which machines on the network they have LOGGED IN on which particular date.

your kind help will be highly appreciated.

Thanks

This conversation is currently closed to new comments.

7 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Answers

Collapse -

Check this link it offers two choices

by Jacky Howe In reply to Domain Administrator's Lo ...
Collapse -

Thanks but its not what I want

by barodian_da_dude In reply to Check this link it offers ...

thanks for your kind help dear.
but the article you provided is telling me to implement scripts on logon & logoff. I need the existing Logs about Administrators from where on network they have logged in.

Can you provide more...?

Collapse -

You could

by Jacky Howe In reply to Thanks but its not what I ...

save the System Event Log as CSV and use Excell to manipulate it for you. You will be looking for Event I 540 for Logon and 538 for Logoff. You could also look for the User Account Name.

Collapse -

You can also filter the events

by Jacky Howe In reply to Domain Administrator's Lo ...

How to Filter Log Events


To filter log events, follow these steps:
Click Start, and then click Control Panel. Click Performance and
Maintenance, then click Administrative Tools, and then double-click
Computer Management.

Or, open the MMC containing the Event Viewer
snap-in.
In the console tree, expand Event Viewer, and then click the log that
contains the event that you want to view.
On the View menu, click Filter.
Click the Filter tab (if it is not already selected).
Specify the filter options that you want, and then click OK.
Only events that match your filter criteria are displayed in the
details pane.

To return the view to display all log entries, click Filter on the
View menu, and then click Restore Defaults.

Collapse -

still its not done

by barodian_da_dude In reply to You can also filter the e ...

thank you all for your kind help

but the suggestions you all are providing is to check system n security logs and about filtering but still its only giving me results only of LOGON & LOG OFF but its not giving me details from where which machine on network I had Login. And the main thing is we need to specify or filter by specific username. But I am looking for the whole Domain Admin Logins logs which is some how I am not able to get it.

Collapse -

anyother new program

by barodian_da_dude In reply to Domain Administrator's Lo ...

Is there any specific program which can integrate with DHCP SERVER OR ACTIVE DIRECTORY which can provide me the information as I had asked for?

Collapse -

Here is a couple

by Jacky Howe In reply to anyother new program

but I think that you will find that they probably work with scripts.


http://www.softwaremetering.com/_logon_logoff.htm


http://technet.microsoft.com/en-au/magazine/cc160794.aspx

Back to Networks Forum
7 total posts (Page 1 of 1)  

Related Discussions

Related Forums