Hi
I would like to get an email when a user logs onto the domain after hours
I have anabled auditing of logon events and setup an alert to mail me in health monitor based on an event in in event viewer
The problem is that the machines at the office seem to still communicate even when people are not thier
I have tried to check the following event ID’s:
528
562
538
576
680
But none of them seem accurate……for most of them generate many event which meen I get nailed with alot of alerts
I just need to know when somebody logs on after 6pm on week days and anytime on the weekends
What is the best way to go about this????
Your assistance is greatly appreciated
