Windows Forum

Ask something
Discussion Locked

Audit user account

0 helpful
3 replies

by wrhale_1

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I have 2 'remote' users that I want to audit their logon and logoff times to the network. They have to authenticate to our SBS server via VPN to logon. I do not want to waste cpu time on auditing all users logon/logoff events. Thanks for help.

3 replies

by joseph moore

The last logon/logoff times for each user account are automatically recorded per domain controller in a Windows domain.
The best tool I know of to get this info is Dameware NT Utilities (also Win2K compatible).

www.dameware.com

You can select a Domain Controller in your domain, open up the Users container, then right-click the user account in question and choose Login Times.

A window comes up, listing the last logon and last logoff time for that user account on that domain controller. YOu would then click the Check All DCs button, to get the times for this user on all domain controllers in that Windows domain.

No special auditing necessary. This info is saved in the SAM for each user.

hope this helps

by wrhale_1

Thank you for your help, but NG. User is a remote office that connects via VPN, and regular auditing (even w/Dameware does not work.

This discussion is closed to new replies.