Re: login/logoff Report

Have you tried using the UNC path to the log?

\\<sbs>\share\logon.log

The script should log any authentication to the server or a workstation,
even via RWW.

--
Merv Porter [SBS MVP]
===================================
"hijack" <hijack@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:F474FAAE-17BD-422B-A380-B8E82E8666DF@xxxxxxxxxxxxxxxx
When the clients login or out the logon.log file does not register any
entries (blank). I access the server via RWW and am not sure whether this
type of login will register on the server. Could there be a problem with
the
active directory setup?
--
Thanks for the help
Jack


"Merv Porter [SBS-MVP]" wrote:

Do you mean that the log only shows entries for the workstations, not the
SBS server?

On the SBS server, my logon.cmd contains:

echo logon %username% %computername% %date% %time% >>
\\<servername>\share\logon.log

The share has permissions... domain users: read-write, domain admins:
Full

See attachment.

--
Merv Porter [SBS MVP]
===================================
"hijack" <hijack@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:F113DD38-8003-4207-BB94-F5D482B5C6D4@xxxxxxxxxxxxxxxx
I can only get this to work on my PC and not the server. My logon.cmd
file
contains "echo logon %username% %computername% %date% %time% >>
C:\sbs\share\logon.log".
Must some kind of scripting be turned on on the server to get this to
work?

--
Thanks for the help
Jack


"Merv Porter [SBS-MVP]" wrote:

Everything is done on the SBS server only. When any device logs
into/off
of
the domain (the domain controller - the SBS server), the logon/logoff
info
is recorded.

The only issue I've seen in the log is when an RWW session (i.e., RDP
to
a
LAN workstation) is allowed to time out. This leaves the RDP session
still
running on the workstation. The log will show that the user has not
logged
off the workstation but if another user tries to RDP to that same
workstation, they will be informed that the workstation is locked.
This
really isn't a problem with the logging procedure, just a pain to
decipher
at times.

--
Merv Porter [SBS MVP]
===================================
"hijack" <hijack@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:549A803F-3D9A-4727-B5AC-DB16759F0BE4@xxxxxxxxxxxxxxxx
Must the two files with the cmd extention be applied to each PC on
the
network or only on the server?
--
Thanks for the help
Jack


"Merv Porter [SBS-MVP]" wrote:

Low tech way...

Lazy man's way to track user logon/logoff
http://msmvps.com/blogs/kwsupport/archive/2005/02/24/36942.aspx

--
Merv Porter [SBS MVP]
===================================
"hijack" <hijack@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:1E3EDD1A-58A3-42CE-822B-1B5A4625272B@xxxxxxxxxxxxxxxx
I need to monitor user login/logoff on SBS2003. How do I
explicitly
set
this
up and get a report ?
--
Thanks for the help
Jack











.

Relevant Pages

  • Re: DCOM Errors in Event log
    ... A time difference between the workstation and the server do you? ... An error occurred during logon ... Les Connor [SBS Community Member - SBS MVP] ... on the server in the security log we are getting error 537 in the event log. ...
    (microsoft.public.windows.server.sbs)
  • Re: login/logoff Report
    ... check the permissions again and make sure the ... Merv Porter [SBS MVP] ... The script should log any authentication to the server or a workstation, ...
    (microsoft.public.windows.server.sbs)
  • Re: External E-mail Down
    ... Merv Porter [SBS MVP] ... server that may be filtering or blocking port 25. ...
    (microsoft.public.windows.server.sbs)
  • Re: External E-mail Down
    ... Merv Porter [SBS MVP] ... server that may be filtering or blocking port 25. ...
    (microsoft.public.windows.server.sbs)
  • Re: login/logoff Report
    ... Share Permissions are Everyone: FULL and the Security Permissions are ... Merv Porter [SBS MVP] ... The script should log any authentication to the server or a workstation, ... LAN workstation) is allowed to time out. ...
    (microsoft.public.windows.server.sbs)