Re: File that manages login details

From: Jojy K Kuriakose (JojyKKuriakose_at_discussions.microsoft.com)
Date: 01/25/05 

Date: Mon, 24 Jan 2005 20:25:02 -0800

Thanx for the Help

Let me explain my problem in detail.
Well I have a laptop with Xp installed.
I have created a number of users so that my friends and family may login to
the system.
So I would like to know if there is a file that shows me (if not all but
some of them) information such as the users who have logged in the time of
login in and logging out time , if the user has selected shut down ,
hibernate , restart etc!!
As you can see it would be helpful in a number of ways.

Jojy

"Steven L Umbach" wrote:

> There is no such file but if you enable auditing of account logon events for
> Domain Controller Security Policy and logon events for Domain Security
> Policy or Local Security Policy most of that information is available in the
> security logs in Event Viewer. You can use the free Event Comb to scan the
> security logs of multiple computer or buy a third party program that can
> centralize certain security log events. LanGuard has such a program and I
> believe they offer a thirty day trial. --- Steve
>
> http://www.gfi.com/lanselm/
>
> "Jojy K Kuriakose" <Jojy K Kuriakose@discussions.microsoft.com> wrote in
> message news:C083C302-E9B3-4036-9F72-6231177281D2@microsoft.com...
> > Is there a file that manages the login details.
> > Details of the users who has loged in, how long they logged in, time they
> > loged out,
> > if they chose shut down or hybernate ... etc
> > is there a file that the administrator can view o see which all users have
> > loged in
> >
>
>
>

Relevant Pages

  • Unauthorized account listing from a remote system
    ... My security logs on Windows NT 4.0 SP6a servers show hundreds of 529 ... Looks like someone outside my LAN ... attempted to login with the credentials of every user in my domain ... how do I figure out who it was (even log shows workstation name ...
    (comp.os.ms-windows.nt.admin.security)
  • Re: Event Logs
    ... Because someone tried to login into WHATEVER from TESTMACHINE. ... > I have been looking at the security logs on one of my workstations. ... > Successful Network Logon ... > Why would a logon event for the user test going to the workstation ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Account lockout
    ... Ghealdan wrote: ... I see lots of login attempts in the security logs but there is no indication of which machine on the domain it is coming from. ...
    (microsoft.public.windows.server.active_directory)
  • Security log is blank?
    ... and everytime this PC logs in to our network, ... and the server to show all login attempts, ... The security logs on this pc have not been ...
    (microsoft.public.win2000.security)
  • Re: Urgent: All AD users are locked out
    ... Mhd wrote: ... Please help to sort out this critical problem ... enable auditing and check the security logs ... security policy is an option for you: ...
    (microsoft.public.windows.server.active_directory)