Logging user logon/logoff times

The_KiD · 12 Jul 2006 at 10:36

We use Windows2000 server with Active Directory and Citrix on top of it.

I have been asked to look into logging times when specific users log on and off and cant find how to do it simply.

Can anyone tell me the way or point me in the right direction plz?

crashuk · 12 Jul 2006 at 12:42

The_KiD said:
We use Windows2000 server with Active Directory and Citrix on top of it.

I have been asked to look into logging times when specific users log on and off and cant find how to do it simply.

Can anyone tell me the way or point me in the right direction plz?

event viewer, security

The_KiD · 12 Jul 2006 at 12:51

The security log does show some people, but doesnt seem to do it for all logging in and logging out events.

How do I configure it to monitor a specific user.

crashuk · 12 Jul 2006 at 13:10

The_KiD said:
The security log does show some people, but doesnt seem to do it for all logging in and logging out events.

How do I configure it to monitor a specific user.

Systems Management Server thats what you need, www.eventrigger.com, or GFI LANguard.

or

wmic /output:c:\security.htm ntevent where "eventtype= ( look for *** number of the event you want to find) and logfile= ' security ' " get logfile, sourcename, eventtype, message, timegenerated /format:httable

run this as a bat file.

go to gpo audit policy --- audit account logon event select sucess and failure.

then you have account management used for *** creation of folders by users etc...