General discussion


server 2003 user logs

By mhutchison ·
Using server 2003 std edition, is there a way to view what time a user logged in and what time the user logged out at the end of the day?

Thanks everyone in advance

This conversation is currently closed to new comments.

Thread display: Collapse - | Expand +

All Comments

Collapse -

by BFilmFan In reply to server 2003 user logs

You will need to monitor login and logoff events. You will need to set this in a GPO that applies to your domain and domain controllers. You will want to monitor for success and failure events.

The 2 events you appear to be most interested in are:

528 User successfully logged into the local system (workstation, server, domain controller)
540 User logged into a network.
538 User has logged off.

Note that you will need to increase the size of your security log as this will generate a large number of changes in the logs.

A deeper explanation of the codes are here:

Related Discussions

Related Forums