[MonthOLDpickle]

Been trying to find this on google, but I must be using the wrong keywords.

I am still very new to servers but I set one up as a domain controller and file sharing. I need to know be able to log/record when users log in and log off - pull that data and send to the boss. I heard there is a built in function for this but I can't find and I don't know how to script.

[BSchwarz]

Maybe this article will help:

http://technet.micro...y/cc751315.aspx

[Matt]

You're looking for what Microsoft calls "auditing" rather than logging or recording. If you google for auditing account logon events, you will find more information. Unfortunately for your reporting, this logs more than just logging on to a computer and then logging off for the day. It also logs every time a user is authenticated -- using a network share, connecting to a network resource, etc. Also, it just throws it all into the Events log which isn't so easy to run reports from. This old thread here also has a vbscript for pulling out logon events. You can also purchase something like GFI EventsManager which has a number of reports available.

[MonthOLDpickle]

I am using windows server 2008 and enabled the audit log in service for success and fail...

But the thing is I see some of it yet can't create custom filters to just show the user logins.

[MonthOLDpickle]

I am still having issues trying to get the info I needed. I enabled audit services and I can manually see some of them in the event viewer. But when I go make filters nothing works: user names, event codes, and etc..


Is there a 3rd party program that I can use?