Re: Can you Audit logouts??

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 06/30/04 

Date: Wed, 30 Jun 2004 01:06:18 GMT

You can use filter view in Event Viewer or Event Comb [free from MS at the kink
below] to scan multiple computers for certain events and other search criteria.
Otherwise there are third party tools that can make it easier to do. UsrStat fro the
RK will also tell last time a user logged off of the domain. --- Steve

http://www.microsoft.com/downloads/details.aspx?FamilyId=7AF2E69C-91F3-4E63-8629-B999ADDE0B9E&displaylang=en
http://www.gfi.com/lanselm/

"Kevin Arentsen" <kevinarentsen@hotmail.com> wrote in message
news:22a6f01c45e16$d9dce380$a601280a@phx.gbl...
> I have auditing for logins/logouts turned on. It appears
> that auditing is working as events do show up in the event
> logs. Is there an easier way or program to use to see
> when people are logging in and logging out? I'd like to
> see when user John Doe logged out last week one night if
> he logged out at all. The event log is painful to go
> through. Is there an easy way to do that? Thanks,
>
>

Relevant Pages

  • Re: track user logons
    ... including user actions such as logging on and logging off, and the success and failure of key ... Before you enable auditing, it will be important for you to define exactly ... For example, if you decide to audit account logon sessions, you need to consider what the information ... Your security administrators group might be interested in logging failed logon events ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Security logging stopped
    ... login successes and failure events was turned on in the RAS server settings. ... enable auditing on your RAS server: ... Note that to enable logging of access to files or registry settings, ... security properties in Windows Explorer or the REGEDT32 registry editor. ...
    (microsoft.public.security)
  • Re: Logging!!?
    ... > I am used to use logging into a file with Java but I see many in .NET use ... > Can you tell me if anybody cares about logging and what is the strategy ... you might want to use a database. ... The Event log allows you to filter/sort the records on ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: Windows Service in C#
    ... Depending on what level of logging you need log4net or the Enterprise Library logging block may be of use. ... I'd start by checking the event log in the application section on the machine where the errors are occuring at just to make sure something hasn't already been logged. ... In this way you can use the debugger against the service in the same way as if you were debugging a standard windows executable. ... This works, but a drawback of this method is that it doesn't allow you to debug the process from the start, so you can miss events you need to see. ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: Security logging stopped
    ... > Try using the Event Log viewer to clear the event log. ... > login successes and failure events was turned on in the RAS server ... > enable auditing on your RAS server: ... > Note that to enable logging of access to files or registry settings, ...
    (microsoft.public.security)