General discussion

Locked

log for log ins

By dennisbv ·
I am a new network administrator and I have been asked to log when a user logs in. Also I would like to log specific users also(sales man)the saleman would most of the time using a dialup to access our network.

This conversation is currently closed to new comments.

5 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

log for log ins

by hstahl In reply to log for log ins

You need to enable auditing on your domain. You do this w/ User Manager for Domains. Click on Policies -> Audit. Since your only interested in logons check the success for Logon and Logoff. You'll probably want to check Failure as well.

If you're only interested in a group of people the best way to do that might be to enable auditing on a resource, for example the logon script that all sales people use (if there is one). You would do this by right clicking on the item and choosing Properties. Then Security -> Auditing. If you've got a NT group setup for your salesman just add that group, if not add each individual.

-Heath

Collapse -

log for log ins

by dennisbv In reply to log for log ins

Poster rated this answer

Collapse -

log for log ins

by Bill_H In reply to log for log ins

Hey, Dennis-

There is an article that does a nice job of covering the various facets of NT security titled "Securing Windows NT 4.0 Installation"; it's located at:

http://www.microsoft.com/TechNet/winnt/Winntas/technote/Planning/secnt2.asp

Browse down to (or search for) the topic "Enabling System Auditing" for instructions on setting up the auditing for user logins. You may wish to set different parameters for local and remote logins.

If you haven't lost the interest in VB programming you expressed a couple of months ago, you might also look at the article "Logging Application, Server, and Security Events", which discusses the EventLog component. This article may be found at:

http://msdn.microsoft.com/library/dotnet/cpguide/cpconloggingapplicationserversecurityevents.htm

(If the URLs above do not work, locate and remove any spaces inserted by the TechRepublic system.)

Hope this helps...

Collapse -

log for log ins

by dennisbv In reply to log for log ins

Poster rated this answer

Collapse -

log for log ins

by dennisbv In reply to log for log ins

This question was closed by the author

Back to Windows Forum
5 total posts (Page 1 of 1)  

Related Discussions

Related Forums