General discussion

  • Creator
    Topic
  • #2189963

    Logging Log IN/OUT

    Locked

    by xyberia ·

    Guys was wondering how i log the user logging in and logging out time. The machines are server 2003 and 2000. Any scripts or 3rd party utils?
    -Xyber.

All Comments

  • Author
    Replies
    • #3060472

      Reply To: Logging Log IN/OUT

      by breydel ·

      In reply to Logging Log IN/OUT

      The information should already be logged…

      On the servers’ event log in the security section, the server should already be logging logon and logoff for every user and process.

      What you are therefore looking for are events with an ID of for example 528 (log on) or 538 (log off) combined with the user’s login name.

      I am sure there are plenty of tools out there which allow you to filter or query the event logs, so look there if that is what you need.

    • #3069777

      Reply To: Logging Log IN/OUT

      by xyberia ·

      In reply to Logging Log IN/OUT

      But with that you cannot track which event for each user . As in if the user log in twice that day, the data will be messed up… I tried that. Which is why i am looking for another way. Thanks..
      -Xyber.

    • #3068830

      Reply To: Logging Log IN/OUT

      by nico baggus ·

      In reply to Logging Log IN/OUT

      The low tech way might be to echo username and
      date/time to a logfile. This can be done from a
      netlog script…, but that leaves a hole. The
      problem being that a user that can write to a
      log can also write garbage to a log…..
      Kind regards,

    • #3053532

      Reply To: Logging Log IN/OUT

      by xyberia ·

      In reply to Logging Log IN/OUT

      Well guys, thank you fer all your help. I turned to Sysinternals fer help.. Their tokenmon is quite usefull. Well, i did some modifications to the program and yes now it works…Like how i wanted it to…
      -Xyber.

    • #2814116

      Try This

      by jedwards33 ·

      In reply to Logging Log IN/OUT

      Yes, take a look at the netwrix logon reporter. It?s free and it reports on all failed and successful logon events.

Viewing 4 reply threads