Re: tracking users login and logoff

From: george (anonymous_at_discussions.microsoft.com)
Date: 12/18/04 

Date: Sat, 18 Dec 2004 01:17:38 +0100

With PRO you can use Local Security Policy (Control Panel, Administrative
Tools)
Security Settings,
Local Policies
Auditing Policy
Audit Account Logon Events (right hand side) Success and/or failure)
The logging will then appier in your Event logs.
Start, Run, Eventvwr.msc and look in the Security Log.
You can export the security log (in CSV format) to be imported into say
Excel for more easy analysis of the log.

hth

george

"Christine" <Christine@discussions.microsoft.com> wrote in message
news:BA4D589B-EAAE-4DF8-AE03-34BBA6C84F45@microsoft.com...
> Is there a quick way ie a file that is already generated by XP to track an
> users logon and logoff time? If there is not a file being generated are
> there
> suggestions on how to start tracking user logon and logoff times?

Relevant Pages

  • Re: Unusual logon / logoff Security event log
    ... I researched the MPS Report but didn't find the Security log. ... Click Services tab and select Hide All Microsoft Services and Disable ... and a logon GUID. ...
    (microsoft.public.windows.server.sbs)
  • Re: IIS6 prompting for username and password
    ... Security log was full. ... > Logon Failure: ... > Caller User Name: NETWORK SERVICE ...
    (microsoft.public.inetserver.iis.security)
  • Re: How to find out what computer a user logged in on.
    ... For a domain your best bet is to enable auditing of logon events in Domain ... Controller Security Policy and for domain computers enable auditing of logon ... security log quite a bit on your domain controllers to sat at least 10MB. ...
    (microsoft.public.win2000.security)
  • Re: Event Viewer
    ... network" user right in Local Security Policy and reboot. ... error message on his computer when the application/process that needs authentication ... > Successful Network Logon: ... I seem to get an entry in my Security Log every time he ...
    (microsoft.public.win2000.security)
  • Re: Tracking RWW and Terminal Services Usage
    ... That's what I was looking for with regard to RWW. ... It seems like quite a large hole in the security monitoring that we have no ... It appears that there is no build-in tool to track the specific logon ... you will find four entries in the security log. ...
    (microsoft.public.windows.server.sbs)