Re: monitor logon time

Tech-Archive recommends: Speed Up your PC by fixing your registry

Thanks for all answers. Just what i needed.
Appears Audit logon events needs to be turned on also.

DaveP


"David Candy" <.> wrote in message
news:uqokIUXYGHA.3840@xxxxxxxxxxxxxxxxxxxxxxx
Audit logon events

Should be done as well to cover all logons.

The one you mention is ones the local security system authorised. On a
domain I don't think it will log as local computer does nothing. The above
one is people logging on to this specific machine no matter where it was
authorised..
--
--------------------------------------------------------------------------------------------------
How to lose a war in Iraq
http://webdiary.com.au/cms/?q=node/1335#comment-48641
=================================================
"Rick "Nutcase" Rogers" <rick@xxxxxxxx> wrote in message
news:O8QgCOXYGHA.4620@xxxxxxxxxxxxxxxxxxxxxxx
Hi,

Yes, start/run secpol.msc. Click on Local Policies/Audit Policies, then
double click on "Audit Account Logon Events" in the right pane. Enable at
least the "success" option. Close the local security snap-in. You will now
find any new logons listed in the security portion of the event viewer.

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP
http://mvp.support.microsoft.com/
Windows help - www.rickrogers.org

"DaveP" <d_powelson@xxxxxxxxxxxxxx> wrote in message
news:eIqTWxVYGHA.4836@xxxxxxxxxxxxxxxxxxxxxxx
Is there a way to monitor USER logon time on an XP Pro machine?

TIA,

DaveP





.

Relevant Pages

  • Re: how can i find out who have login to the computer bofore?
    ... Double click on Local Security Policy. ... right click on "Audit logon events". ... In order to enable auditing in XP Pro, ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: monitor logon time
    ... Windows help - www.rickrogers.org ... Audit logon events ... The one you mention is ones the local security system authorised. ... double click on "Audit Account Logon Events" in the right pane. ...
    (microsoft.public.windowsxp.general)
  • Re: Get list of users who logged into Domain Controller?
    ... need to enable "Audit logon events" I suggest you also enable "audit account ... Both of these should be enabled on the domain controller policy. ... > Networks" was missing from the Network Properties. ...
    (microsoft.public.win2000.security)
  • Re: Monitor file system changes
    ... There is AD auditing, and then there's file system and other resource auditing. ... Audit logon events: Security Configuration Editor; ... If both account logon and logon audit policy categories are enabled, logons that use a domain account generate a logon or logoff event on ... ...
    (microsoft.public.windows.server.active_directory)
  • Re: Log-in log-out
    ... In addition to the policy already in place also enable the "Audit logon events" policy, you should then see Events 528. ... Audit account logon events will record events 680 and 681. ...
    (microsoft.public.win2000.general)