Re: login/logoff Report

See if this helps...

"Users" and "Domain Users" are not the same.

Permissions on a file server
http://technet2.microsoft.com/WindowsServer/en/Library/86987829-3f74-412f-abb8-c8b22b07257d1033.mspx?mfr=true

Managing Access to Resources
http://www.examcram2.com/articles/article.asp?p=102341&rl=1

Share/NTS Permissions
http://www.windowsecurity.com/articles/Share-Permissions.html


Make sure you're logged onto the SBS server as a domain admin.
Right click on the shared folder and select "Sharing and Securty...".
Under the Sharing tab, click on the Permissions button
Under the Share Permissions tab, put a checkmark in the "Full Control" box
Click OK

Click on the Security tab.
Click Add.
In the field for "Enter the object names to select", type: domain admins
Click OK
In the section marked "Permissions for Domain Admins", put a checkmark in
"Full Control" box under "Allow"
Click Add.
In the field for "Enter the object names to select", type: domain users
Click OK
In the section marked "Permissions for Domain Users", put a checkmark in the
"Read" and a checkmark in "Write" boxes under "Allow"
Click the Apply button
Click OK


--
Merv Porter [SBS MVP]
===================================
"hijack" <hijack@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:FE07EAA3-4A57-405B-8386-7EAEE4138A59@xxxxxxxxxxxxxxxx
Thanks for being so patient. I am having difficulty in setting up the
permissions. Most of these are grayed out and cannot be changed.
Are users and domain users the same group? Please point me to more reading
on permission setup (simple reading).
--
Thanks for the help
Jack


"Merv Porter [SBS-MVP]" wrote:

On the shared (log) folder, check the permissions again and make sure the
Share Permissions are Everyone: FULL and the Security Permissions are
Domain Users: read-write.

--
Merv Porter [SBS MVP]
===================================
"hijack" <hijack@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:13C86F3E-E26D-4BA3-B0C7-918316E14C17@xxxxxxxxxxxxxxxx
I did a bit of reading on UNC and tried various formats. My SBS is a
folder
that is shared with full access and so is the share folder. ( The path
is
C:\SBS\Share\logon.log)
On my local PC \\computername\folder\logon.log does not register any
entries
in the log file. On my server I have tried
\\servername.domain.local\folder\logon.log . Only administrator login's
are
registered in the file if I go t start -> logoff ( this via RWW). The
client
logon entries were not registered at all.

--
Thanks for the help
Jack


"Merv Porter [SBS-MVP]" wrote:

Have you tried using the UNC path to the log?

\\<sbs>\share\logon.log

The script should log any authentication to the server or a
workstation,
even via RWW.

--
Merv Porter [SBS MVP]
===================================
"hijack" <hijack@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:F474FAAE-17BD-422B-A380-B8E82E8666DF@xxxxxxxxxxxxxxxx
When the clients login or out the logon.log file does not register
any
entries (blank). I access the server via RWW and am not sure whether
this
type of login will register on the server. Could there be a problem
with
the
active directory setup?
--
Thanks for the help
Jack


"Merv Porter [SBS-MVP]" wrote:

Do you mean that the log only shows entries for the workstations,
not
the
SBS server?

On the SBS server, my logon.cmd contains:

echo logon %username% %computername% %date% %time% >>
\\<servername>\share\logon.log

The share has permissions... domain users: read-write, domain
admins:
Full

See attachment.

--
Merv Porter [SBS MVP]
===================================
"hijack" <hijack@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:F113DD38-8003-4207-BB94-F5D482B5C6D4@xxxxxxxxxxxxxxxx
I can only get this to work on my PC and not the server. My
logon.cmd
file
contains "echo logon %username% %computername% %date% %time% >>
C:\sbs\share\logon.log".
Must some kind of scripting be turned on on the server to get
this
to
work?

--
Thanks for the help
Jack


"Merv Porter [SBS-MVP]" wrote:

Everything is done on the SBS server only. When any device logs
into/off
of
the domain (the domain controller - the SBS server), the
logon/logoff
info
is recorded.

The only issue I've seen in the log is when an RWW session
(i.e.,
RDP
to
a
LAN workstation) is allowed to time out. This leaves the RDP
session
still
running on the workstation. The log will show that the user has
not
logged
off the workstation but if another user tries to RDP to that
same
workstation, they will be informed that the workstation is
locked.
This
really isn't a problem with the logging procedure, just a pain
to
decipher
at times.

--
Merv Porter [SBS MVP]
===================================
"hijack" <hijack@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:549A803F-3D9A-4727-B5AC-DB16759F0BE4@xxxxxxxxxxxxxxxx
Must the two files with the cmd extention be applied to each
PC
on
the
network or only on the server?
--
Thanks for the help
Jack


"Merv Porter [SBS-MVP]" wrote:

Low tech way...

Lazy man's way to track user logon/logoff
http://msmvps.com/blogs/kwsupport/archive/2005/02/24/36942.aspx

--
Merv Porter [SBS MVP]
===================================
"hijack" <hijack@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:1E3EDD1A-58A3-42CE-822B-1B5A4625272B@xxxxxxxxxxxxxxxx
I need to monitor user login/logoff on SBS2003. How do I
explicitly
set
this
up and get a report ?
--
Thanks for the help
Jack

















.