Trying to track logon/logoff times /dates

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance



We have Windows 2000 DCs in AD (2 domain controllers) and about 5 member
servers (it probably does not really matter in this case).

We need to record users logon/logoff times. For that purpose we are using
logon and logoff scripts for the AD domain in the Group Policy which look
like this:

==========================================
echo off
date /t >> \\domain_controller\logs$\%username%.log
time /T >> \\domain_controller\logs$\%username%.log

echo The user %username% on %computername% logged in >>
\\domain_controller\logs$\%username%.log

echo. >> \\domain_controller\logs$\%username%.log
==========================================

-this is the logon script and similar one is used for log off (with
different word).

The log$ share is already created on the "domain_controller" computer (this
is actually a DC) and there is separate log file for each user.

And it does work (mostly...).

The problem is that log files sometimes very intermittently got overwritten.
It could stay for a week or two and then just start from empty file the user
log on again. And it happens for one user today, and for two other users next
week etc.

Any ideas why?

Thanks, everybody, in advance.


.



Relevant Pages

  • Re: View User logon time in Active Directory
    ... you can use logon and logoff scripts to track information. ... date/time, and IP address to a log file linked here: ...
    (microsoft.public.windows.server.general)
  • Re: Auditing User Logon/Logoff
    ... Steve ... I use logon and logoff scripts that log to a shared text file. ... I copy the log file ...
    (microsoft.public.windows.server.active_directory)
  • Re: Monitoring a disconnected id
    ... Group policy will allow you to implement both logon and logoff scripts, ... create a logoff script that sends an email notification. ...
    (microsoft.public.windows.terminal_services)
  • Re: local Mandatory profiles and logon/logoff scripts
    ... Where are your logon and logoff scripts located? ... from the local profile or from the mandatory profile. ...
    (microsoft.public.windows.terminal_services)
  • Re: EventID 534: User has not been granted requested logon type
    ... Location of the log file - %windir%\debug ... Command Prompt setting - Enable from command prompt with "NLTEST ... >>>> logon type at this machine". ... >>>> that this might be an anonymous logon request, ...
    (microsoft.public.win2000.security)