Question

  • Creator
    Topic
  • #2154119

    Domain Administrator’s Login Logs

    Locked

    by barodian_da_dude ·

    Hi all,

    I have a task assigned about providing MY Senior officer the LOG details of ADMINISTRATOR’S LOGINS in our organization. I would like to know that how can I provide or can have LOGs of DOMAIN ADMINISTRATORS from which machines on the network they have LOGGED IN on which particular date.

    your kind help will be highly appreciated.

    Thanks

All Answers

  • Author
    Replies
    • #2911507

      Clarifications

      by barodian_da_dude ·

      In reply to Domain Administrator’s Login Logs

      Clarifications

    • #2911488

      Check this link it offers two choices

      by rob miners ·

      In reply to Domain Administrator’s Login Logs

      • #2911207

        Thanks but its not what I want

        by barodian_da_dude ·

        In reply to Check this link it offers two choices

        thanks for your kind help dear.
        but the article you provided is telling me to implement scripts on logon & logoff. I need the existing Logs about Administrators from where on network they have logged in.

        Can you provide more…?

        • #2911201

          You could

          by rob miners ·

          In reply to Thanks but its not what I want

          save the System Event Log as CSV and use Excell to manipulate it for you. You will be looking for Event ID: 540 for Logon and 538 for Logoff. You could also look for the User Account Name.

    • #2921247

      You can also filter the events

      by rob miners ·

      In reply to Domain Administrator’s Login Logs

      How to Filter Log Events

      To filter log events, follow these steps:
      Click Start, and then click Control Panel. Click Performance and
      Maintenance, then click Administrative Tools, and then double-click
      Computer Management.

      Or, open the MMC containing the Event Viewer
      snap-in.
      In the console tree, expand Event Viewer, and then click the log that
      contains the event that you want to view.
      On the View menu, click Filter.
      Click the Filter tab (if it is not already selected).
      Specify the filter options that you want, and then click OK.
      Only events that match your filter criteria are displayed in the
      details pane.

      To return the view to display all log entries, click Filter on the
      View menu, and then click Restore Defaults.

      • #2921579

        still its not done

        by barodian_da_dude ·

        In reply to You can also filter the events

        thank you all for your kind help

        but the suggestions you all are providing is to check system n security logs and about filtering but still its only giving me results only of LOGON & LOG OFF but its not giving me details from where which machine on network I had Login. And the main thing is we need to specify or filter by specific username. But I am looking for the whole Domain Admin Logins logs which is some how I am not able to get it.

    • #2921565

      anyother new program

      by barodian_da_dude ·

      In reply to Domain Administrator’s Login Logs

      Is there any specific program which can integrate with DHCP SERVER OR ACTIVE DIRECTORY which can provide me the information as I had asked for?

Viewing 3 reply threads