Re: audit event for dial up internet connection in Xp pro

From: David Candy (david_at_mvps.org)
Date: 06/12/04 

Date: Sat, 12 Jun 2004 18:50:43 +1000

Select the System Log.Right click and choose Properties. Choose Filter tab and select Remote Access in the source box. 20159 is disconnect and 20158 is connect. Choose Ok and you can read it.

Then Right Click, Export, csv file, then import into Excel. Sort on Event and delete all those not 20159/8.

Then you can sort on time and date. You can write formulas to pull out what you want. 

-- 
----------------------------------------------------------
http://www.smh.com.au/yoursay/2004/06/11/index.html
"aken" <aken@discussions.microsoft.com> wrote in message news:2C628AA5-3440-463E-BBE5-F4E3A1D568AA@microsoft.com...
> hi, thnks for the reply but as the reply says of script, i am totally new to this concept. can you link me up to some site where in i can idea of some codes and its functionility so that i can gear up to write my own defined code. without it am lost.
> 
> aken
> 
> "Shenan Stanley" wrote:
> 
> > aken wrote:
> > >  how can i generate event log for all the dial up connection made by
> > > the user in a domain environment (win 2000 server and win xp clients)
> > > where 1 dial up connection (in client) is used by more then 30
> > > persons. to keep check on who uses internet and for how long, at what
> > > time etc etc...
> > >
> > >  is there any inbuilt funtion in the OS to tract these activities or
> > > should one go for third party tools, if any. pls suggest.
> > 
> > 
> > Find an application to write your event log out and parse it for you or
> > write a script to do this.
> > 
> > -- 
> > <- Shenan ->
> > -- 
> > The information is provided "as is", with no guarantees of
> > completeness, accuracy or timeliness, and without warranties of any
> > kind, express or implied.  In other words, read up before you take any
> > advice - you are the one ultimately responsible for your actions.
> > 
> > 
> >

Relevant Pages

  • Windows service with console
    ... I'd like to write a windows service in .net, in itself that's not a big deal, ... would be useful to have some screen logging, just the sort of stuff that is ... more than I want in the event log but not the sort of ... write a trace listener to listen for information from the service? ...
    (microsoft.public.dotnet.framework)
  • Re: Cannot start IAS and RRAS
    ... Check this KB article for RRAS related error ... > System event log: Service Control Manager Event ID 7023 ... (Icons for Remote Access Policies ...
    (microsoft.public.win2000.ras_routing)
  • Re: Repost--RRAS terminated with service-specific error 16389
    ... This may be because the IAS database is damaged because both RRAS and IAS ... policy objects as the application event log suggests. ... > Icons for Remote Access Policies and Remote Access Logging ... > service-specific error 16389." ...
    (microsoft.public.win2000.ras_routing)
  • Re: VPN debugging fun, time to test your minds
    ... Open Routing and remote access manager ... Expand remote access policies ... >> set in your dial up connection. ... >>> Here's what I got out of the System Event Log. ...
    (microsoft.public.windows.server.networking)
  • remote access
    ... event log in windows 2000 and it says remote access does ... event log .I dont know how to find out who it is or if it ... I dont think my ...
    (microsoft.public.win2000.security)