Re: File that manages login details

From: Steven L Umbach (n9rou_at_n0-spam-for-me-comcast.net)
Date: 01/24/05


Date: Mon, 24 Jan 2005 12:12:22 -0600

There is no such file but if you enable auditing of account logon events for
Domain Controller Security Policy and logon events for Domain Security
Policy or Local Security Policy most of that information is available in the
security logs in Event Viewer. You can use the free Event Comb to scan the
security logs of multiple computer or buy a third party program that can
centralize certain security log events. LanGuard has such a program and I
believe they offer a thirty day trial. --- Steve

http://www.gfi.com/lanselm/

"Jojy K Kuriakose" <Jojy K Kuriakose@discussions.microsoft.com> wrote in
message news:C083C302-E9B3-4036-9F72-6231177281D2@microsoft.com...
> Is there a file that manages the login details.
> Details of the users who has loged in, how long they logged in, time they
> loged out,
> if they chose shut down or hybernate ... etc
> is there a file that the administrator can view o see which all users have
> loged in
>



Relevant Pages

  • Re: How do I find out when user XXX logged in+out on last Tuesday? Event log entry possible?
    ... You can do that through the local security policy. ... In the right hand pane, right click on Audit logon events. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Windows XP User logs
    ... You can do that through the local security policy. ... In the right hand pane, right click on Audit logon events. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Terminal Services Auditing not working
    ... I followed your steps for auditting logon events to the T and it ... I make to the local security policy can't be overidden. ... Then using the Terminal Services Configuration tool I've right clicked ...
    (Focus-Microsoft)
  • Re: DMZ NT4 TO Internal 2000 AD One-Way Trust via Firewall
    ... leverage an effectivity security policy to ensure that password complexities ... > currently a mess of local and domain users, no security policy, etc. ... DMZ, not publicly accessible) that aren't going away within the stated ... to non-DC web servers in the DMZ on 80 and 443 - none of which are directed ...
    (microsoft.public.windows.server.active_directory)
  • RE: [fw-wiz] PIX vs Checkpoint vs Sonicwall vs Netscreen - comme nts?
    ... > Checkpoint propaganda stuff. ... > spent most of my security consulting career trying to stomp out bloated ... >>All NetScreen appliances rely on custom-designed ASICs (Application ... >>Specific Integrated Circuits) for security policy enforcement. ...
    (Firewall-Wizards)