General discussion

Locked

server 2003 user logs

By mhutchison ·
Using server 2003 std edition, is there a way to view what time a user logged in and what time the user logged out at the end of the day?

Thanks everyone in advance

This conversation is currently closed to new comments.

1 total post (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

by BFilmFan In reply to server 2003 user logs

You will need to monitor login and logoff events. You will need to set this in a GPO that applies to your domain and domain controllers. You will want to monitor for success and failure events.

The 2 events you appear to be most interested in are:

528 User successfully logged into the local system (workstation, server, domain controller)
540 User logged into a network.
538 User has logged off.

Note that you will need to increase the size of your security log as this will generate a large number of changes in the logs.

A deeper explanation of the codes are here:

http://www.microsoft.com/resources/documentation/WindowsServ/2003/standard/proddocs/en-us/Default.asp?url=/resources/documentation/WindowsServ/2003/standard/proddocs/en-us/518.asp

Back to Windows Forum
1 total post (Page 1 of 1)  

Related Forums