Software

Ask something
Question Locked

SBS 2003

0 helpful
3 replies

by fabio

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hi

I would like to get an email when a user logs onto the domain after hours

I have anabled auditing of logon events and setup an alert to mail me in health monitor based on an event in in event viewer
The problem is that the machines at the office seem to still communicate even when people are not thier

I have tried to check the following event ID's:

528
562
538
576
680

But none of them seem accurate......for most of them generate many event which meen I get nailed with alot of alerts

I just need to know when somebody logs on after 6pm on week days and anytime on the weekends

What is the best way to go about this????

Your assistance is greatly appreciated

3 replies

by rob miners

http://help.lockergnome.com/windows2/track-time-employee-log-log-ftopict479370.html

You could also add this to logon and logoff scripts specified by a Group Policy.

Create A hidden share on the file server EG: Trace$. It was origianlly called from the users logon script. You may have to modify it. I originally used this with 98 on a nt4 domain.

You will have the Username, Computername and Time of logon. It should keep adding to the file with the Logon ID.

@echo off
c:
echo %computername% > %username%.txt
type c:\%username%.txt >> \\"server"\trace$\%username%.txt
echo y| net time \\"server" /set >> \\"server"\trace$\%username%.txt
del c:\%username%.txt

Keep us informed as to your progress if you require further assistance.

If you think that any of the posts that have been made by all TR Members, have solved or contributed to solving the problem, please Mark them as Helpful so that others may benefit from the outcome. ;) :D

by fabio

Thnk you very much for the reply

The machines stay logged onto the Domain, so normally all the user does is unlock thier pc

so the login script will not run,thus leaving me with no info data captured

This discussion is closed to new replies.