Re: event log-logging in/out

From: Joel (Joel_at_discussions.microsoft.com)
Date: 01/26/05


Date: Tue, 25 Jan 2005 19:59:02 -0800

thank you, thats exactly what I was looking for.

"Torgeir Bakken (MVP)" wrote:

> Joel wrote:
>
> > How/what do I use from the event viewer to see when a users
> > logs in/out of their XP/2000 workstation?
> > I have auditing turned on in my group policy but there are
> > several events showing in the event log. I'm not sure which
> > ones are actually the user loggin in/out
> Hi
>
> Interactive logon: Event ID 528 containing Logon Type 2
> Interactive logoff: Event ID 538 containing Logon Type 2
>
>
> --
> torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
> Administration scripting examples and an ONLINE version of
> the 1328 page Scripting Guide:
> http://www.microsoft.com/technet/scriptcenter/default.mspx
>



Relevant Pages

  • Re: Windows File Protection and Windows Updates
    ... version numbers of individual update-files. ... You will find an entry in the "Application" event log (or maybe ... torgeir, Microsoft MVP Scripting, Porsgrunn Norway ...
    (microsoft.public.windowsupdate)
  • Re: event log-logging in/out
    ... > I have auditing turned on in my group policy but there are ... > several events showing in the event log. ... -- torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway Administration scripting examples and an ONLINE version of the 1328 page Scripting Guide: ...
    (microsoft.public.security)
  • Re: C:WINDOWSsystem32autoexec.nt The system file is not suitabl
    ... Thanks to everyone for your prompt replies. ... > In the command prompt, type in the following two commands exactly as ... > torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway ...
    (microsoft.public.windowsxp.configuration_manage)
  • Re: Error number: 0x800A0046
    ... > newsgroup because my dialup network settings had vanished and a guy ... > Notice that the logon account is set to a NT/User account under the RPC ... > torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway ...
    (microsoft.public.windowsupdate)
  • Re: opening "owner" files after hard drive failure
    ... >> My hardrive posts a failure warning, and XP Home SP2 crashes soon after ... > that has Administrative rights to have access to the Security tab. ... > torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway ...
    (microsoft.public.windowsxp.general)