Question Locked

Tracking user logins/logoffs?

0 helpful
4 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I am trying to figure out the easist way (if such a thing exists) in tracking the times users log into and out of our server. We are using Windows Server 2003 R2 and have 10 XP SP2 workstations.

I tried the event log, but after only one week, it had 250,000+ events and it was huge and cumbersome to work with.

The situation is this: we have a few people we suspect are cheating on their time and that's not fair to the rest of us who actually work the time we put down. We're a CPA firm, and during tax season, some come in early in the morning, while some stay late at night, so it's hard to monitor times.

I tried just logging the Account Logon in the event log under Security, and I'll see if that is what I need.

What I don't understand is when I logged logons/logoffs, as opposed to Account logon, it would show 50 logins a day.

Thanks in advance for any help!

4 replies

by rob miners

http://help.lockergnome.com/windows2/track-time-employee-log-log-ftopict479370.html

You could also add this to logon and logoff scripts specified by a Group
Policy.

Create A hidden share on the file server EG: Trace$. It was origianlly called from the users logon script. You may have to modify it. I originally used this with 98 on a nt4 domain.

You will have the Username, Computername and Time of logon. It should keep adding to the file.

@echo off
c:
echo %computername% > %username%.txt
type c:\%username%.txt >> \\"server"\trace$\%username%.txt
echo y| net time \\"server" /set >> \\"server"\trace$\%username%.txt
del c:\%username%.txt

by mfhawn

Thank you for that. I'll give that a try. It seems that these time violations are becoming more egregious since it's tax season and we're expected to work 60+ hours a week.

This discussion is closed to new replies.