Re: login/logoff Report

Thanks for being so patient. I am having difficulty in setting up the
permissions. Most of these are grayed out and cannot be changed.
Are users and domain users the same group? Please point me to more reading
on permission setup (simple reading).
--
Thanks for the help
Jack


"Merv Porter [SBS-MVP]" wrote:

On the shared (log) folder, check the permissions again and make sure the
Share Permissions are Everyone: FULL and the Security Permissions are
Domain Users: read-write.

--
Merv Porter [SBS MVP]
===================================
"hijack" <hijack@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:13C86F3E-E26D-4BA3-B0C7-918316E14C17@xxxxxxxxxxxxxxxx
I did a bit of reading on UNC and tried various formats. My SBS is a folder
that is shared with full access and so is the share folder. ( The path is
C:\SBS\Share\logon.log)
On my local PC \\computername\folder\logon.log does not register any
entries
in the log file. On my server I have tried
\\servername.domain.local\folder\logon.log . Only administrator login's
are
registered in the file if I go t start -> logoff ( this via RWW). The
client
logon entries were not registered at all.

--
Thanks for the help
Jack


"Merv Porter [SBS-MVP]" wrote:

Have you tried using the UNC path to the log?

\\<sbs>\share\logon.log

The script should log any authentication to the server or a workstation,
even via RWW.

--
Merv Porter [SBS MVP]
===================================
"hijack" <hijack@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:F474FAAE-17BD-422B-A380-B8E82E8666DF@xxxxxxxxxxxxxxxx
When the clients login or out the logon.log file does not register any
entries (blank). I access the server via RWW and am not sure whether
this
type of login will register on the server. Could there be a problem
with
the
active directory setup?
--
Thanks for the help
Jack


"Merv Porter [SBS-MVP]" wrote:

Do you mean that the log only shows entries for the workstations, not
the
SBS server?

On the SBS server, my logon.cmd contains:

echo logon %username% %computername% %date% %time% >>
\\<servername>\share\logon.log

The share has permissions... domain users: read-write, domain admins:
Full

See attachment.

--
Merv Porter [SBS MVP]
===================================
"hijack" <hijack@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:F113DD38-8003-4207-BB94-F5D482B5C6D4@xxxxxxxxxxxxxxxx
I can only get this to work on my PC and not the server. My logon.cmd
file
contains "echo logon %username% %computername% %date% %time% >>
C:\sbs\share\logon.log".
Must some kind of scripting be turned on on the server to get this
to
work?

--
Thanks for the help
Jack


"Merv Porter [SBS-MVP]" wrote:

Everything is done on the SBS server only. When any device logs
into/off
of
the domain (the domain controller - the SBS server), the
logon/logoff
info
is recorded.

The only issue I've seen in the log is when an RWW session (i.e.,
RDP
to
a
LAN workstation) is allowed to time out. This leaves the RDP
session
still
running on the workstation. The log will show that the user has
not
logged
off the workstation but if another user tries to RDP to that same
workstation, they will be informed that the workstation is locked.
This
really isn't a problem with the logging procedure, just a pain to
decipher
at times.

--
Merv Porter [SBS MVP]
===================================
"hijack" <hijack@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:549A803F-3D9A-4727-B5AC-DB16759F0BE4@xxxxxxxxxxxxxxxx
Must the two files with the cmd extention be applied to each PC
on
the
network or only on the server?
--
Thanks for the help
Jack


"Merv Porter [SBS-MVP]" wrote:

Low tech way...

Lazy man's way to track user logon/logoff
http://msmvps.com/blogs/kwsupport/archive/2005/02/24/36942.aspx

--
Merv Porter [SBS MVP]
===================================
"hijack" <hijack@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:1E3EDD1A-58A3-42CE-822B-1B5A4625272B@xxxxxxxxxxxxxxxx
I need to monitor user login/logoff on SBS2003. How do I
explicitly
set
this
up and get a report ?
--
Thanks for the help
Jack















.

Relevant Pages

  • Re: DCOM Errors in Event log
    ... A time difference between the workstation and the server do you? ... An error occurred during logon ... Les Connor [SBS Community Member - SBS MVP] ... on the server in the security log we are getting error 537 in the event log. ...
    (microsoft.public.windows.server.sbs)
  • Re: Bizzare security behaviour
    ... NT4.0 workstation and all users that logon to any XP Pro workstation?? ... NT4.0 computer try accessing the share via the IP address of the server ... I can open the folder without difficulty. ... I thought the entire POINT of security permissions being on the server is ...
    (microsoft.public.windowsxp.security_admin)
  • Re: login/logoff Report
    ... check the permissions again and make sure the ... Merv Porter [SBS MVP] ... The script should log any authentication to the server or a workstation, ...
    (microsoft.public.windows.server.sbs)
  • Re: Using SBS2K3 as an answering machine?
    ... very hesitant to put that on the server. ... Let a workstation do that... ... Javier [SBS MVP] ... > perhaps deliver voice message alerts via email. ...
    (microsoft.public.windows.server.sbs)
  • Re: couldnt change the date on machine
    ... It is permissions on the workstation. ... i thought it might be to do with the user permission set on the server ... I haven't tried to change from power user to administrators. ...
    (microsoft.public.windows.server.sbs)