Re: capture and record login times



If you enable auditing of "account logon" events in Domain Controller
Security Policy for success and failure and auditing of "logon" events for
failure only and then enable auditing of logon events in Domain Security
Policy you would see domain logons in the security logs of domain
controllers for domain users and also see logon events in the security log
of the domain workstation that the user logs onto and also a logon events
when the user unlocks his computer.

To force users to logoff you could try using the Resource Kit logoff
screensaver called winexit.scr to logoff a users computer after a certain
period of inactivity though offhand I don't know how well it would work if
the computer is locked but would be easy enough to test out. You could use
Group Policy to configure the winexit.scr screensaver and use Group Policy
"startup" script to distribute it to their computers. Winexit.scr would have
to first be configured to shut down the user's applications before it is
distributed to the user's computers which may result in a loss of data. You
also could have a computer use policy that requires users to logoff their
computer at the end of a work shift and use the information in the security
log of their workstation for disciplinary purposes if they do not
omply. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;314999 --- works
for W2K also
http://support.microsoft.com/default.aspx?scid=kb;en-us;156677

<karl@xxxxxxxxxxxxxxxxxx> wrote in message
news:1134057002.153520.110770@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
>I am trying to find out how I can capture what time users log into
> their machines in the morning on a windows 2000 domain.
>
> The awkward part is that most of the users just lock their pcs and come
> back in the morning and unlock them and I dont know how to force users
> off the network to force a login again in the morning. If the truth be
> told, I wouldn't know how to capture the login time and record it even
> if they had restarted their pc anyway.
>
> If anyone knows how to force users off the network and how to capture
> login times and record them, preferably to a database, I would
> appreciate it greatly.
>


.



Relevant Pages

  • Re: Event Logs/Event Viewer
    ... That works for Pro but Home has no group policy editor. ... Set both Audit account logon events & Audit logon events for Success & ...
    (microsoft.public.windowsxp.general)
  • Re: Tracking Users
    ... You can check the security logs on each DC for logon events by that user if ... the credentials and provides a mechanism that allows the local LSA to verify ... Microsoft MVP - Windows Server - Directory Services ...
    (microsoft.public.windows.server.active_directory)
  • Re: users account log files
    ... If XP Pro, Group Policy. ... Set both Audit account logon events & Audit logon events for Success & ...
    (microsoft.public.windowsxp.general)
  • Re: Shutdown log appear at event viewer
    ... If XP Pro, Group Policy. ... Set both Audit account logon events & Audit logon events for Success & ...
    (microsoft.public.windowsxp.general)
  • Re: IM looking for software to analyze event log
    ... > such as those from Languard that can help manage security logs also. ... > accounts at times that don't make sense - particularly administrator account ... > you download and read the free from Microsoft - Antivirus in Depth guide. ... Logon events are recorded in the security log of a computer ...
    (microsoft.public.win2000.security)

Quantcast