auditing logon and log off

From: lynn (lynn_at_discussions.microsoft.com)
Date: 03/02/05 

Date: Wed, 2 Mar 2005 13:19:05 -0800

I just want to see when a certain user logs into the network
and when he/she logs out. Iv got auditing enabled on the 2003 server. I have
logon checked for auditing sucessful logins. When I log into the system
myself from another computer, it shows me as logging in 7 times all at the
same time. It also has me logging out several times at the same time. Once it
showed me loggin off and logging on at the same time. Is there an easier way
of doing this or am I just doing it completley wrong? I know the event ID im
looking for is 540 and 538. Any help is appreciated.
Thanks

Relevant Pages

  • Re: DHCP Problem
    ... Select the Internal network, and edit it to include .255 ... Server the week before. ... Denied Connections started showing up in the ISA logs seconds later. ... Ethernet adapter Server Local Area Connection: ...
    (microsoft.public.backoffice.smallbiz)
  • Re: HTTPS; SSL-Tunnel
    ... This is another sample of the ISA logs. ... is the DNS server on the internal network. ...
    (microsoft.public.isa)
  • Re: W2K Adv Server will not boot - hangs on splash screen
    ... Post more of the logs here and try posting to the active directory group. ... Insert the OS CD and boot from that, ... > Our Windows 2K Advanced Server hangs on the windows splash screen. ... > The machine will boot to safe mode and safe mode with network. ...
    (microsoft.public.win2000.general)
  • RE: Penetration Testing using OSSTMM
    ... Search web logs and intrusion logs for system trails from the target ... Examine target web server source code and scripts for application ... >>It's easier to test in the real network than to setup a lab for this. ... This list is provided by the SecurityFocus Security Intelligence Alert ...
    (Pen-Test)
  • User cannot access e-mail or internet
    ... I have a user that logs onto the network OK. ... server and his mapped drives. ... as the local compter adminitrator) and it will not complete the setup. ...
    (microsoft.public.windows.server.sbs)