Windows Forum

Ask something
Discussion Locked

server 2003 user logs

0 helpful
1 reply

by mhutchison

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Using server 2003 std edition, is there a way to view what time a user logged in and what time the user logged out at the end of the day?

Thanks everyone in advance

1 reply

by bfilmfan

You will need to monitor login and logoff events. You will need to set this in a GPO that applies to your domain and domain controllers. You will want to monitor for success and failure events.

The 2 events you appear to be most interested in are:

528 User successfully logged into the local system (workstation, server, domain controller)
540 User logged into a network.
538 User has logged off.

Note that you will need to increase the size of your security log as this will generate a large number of changes in the logs.

A deeper explanation of the codes are here:

http://www.microsoft.com/resources/documentation/WindowsServ/2003/standard/proddocs/en-us/Default.asp?url=/resources/documentation/WindowsServ/2003/standard/proddocs/en-us/518.asp

This discussion is closed to new replies.