Logging Log IN/OUT

The information should already be logged...

On the servers' event log in the security section, the server should already be logging logon and logoff for every user and process.

What you are therefore looking for are events with an ID of for example 528 (log on) or 538 (log off) combined with the user's login name.

I am sure there are plenty of tools out there which allow you to filter or query the event logs, so look there if that is what you need.

But with that you cannot track which event for each user . As in if the user log in twice that day, the data will be messed up... I tried that. Which is why i am looking for another way. Thanks..
-Xyber.

The low tech way might be to echo username and
date/time to a logfile. This can be done from a
netlog script..., but that leaves a hole. The
problem being that a user that can write to a
log can also write garbage to a log.....
Kind regards,

Well guys, thank you fer all your help. I turned to Sysinternals fer help.. Their tokenmon is quite usefull. Well, i did some modifications to the program and yes now it works...Like how i wanted it to...
-Xyber.

Yes, take a look at the netwrix logon reporter. It?s free and it reports on all failed and successful logon events.