User Logon ID
Last response: in Windows 2000/NT
Archived from groups: microsoft.public.win2000.security (More info?)
I would like to record User, Computer, and Logon time for each user loging
into our W2K, single DC, server. Something like "net sessions" but recording
just the logon times. The Security Event Viewer seems to capture multiple
events when I ask for "success audit of Logon/Logoff" events. My ultimate
objective is to create a managment report with just the essential logon
identification information.
I would like to record User, Computer, and Logon time for each user loging
into our W2K, single DC, server. Something like "net sessions" but recording
just the logon times. The Security Event Viewer seems to capture multiple
events when I ask for "success audit of Logon/Logoff" events. My ultimate
objective is to create a managment report with just the essential logon
identification information.
More about : user logon
Archived from groups: microsoft.public.win2000.security (More info?)
Logging onto the domain or just the domain controller?? If you want to audit
all user logons to the domain then enable auditing of "account logon events"
in Domain Controller Security Policy. For logons to just the domain
controller enable auditing of logon events in Domain Controller Security
Policy. It is the nature of Windows auditing to record a lot of apparently
multiple identical events for logons [don't ask me why]. There is no built
in quick and easy way to generate nice concise reports. You may want to look
at a third party program like S.E.L.M. as shown at the link below. They
offer a free trial of it.--- Steve
http://www.gfi.com/lanselm/
"jimtotem" <jimtotem@discussions.microsoft.com> wrote in message
news:158D1957-BBDD-4839-8CF7-6475B0C212D2@microsoft.com...
>I would like to record User, Computer, and Logon time for each user loging
> into our W2K, single DC, server. Something like "net sessions" but
> recording
> just the logon times. The Security Event Viewer seems to capture multiple
> events when I ask for "success audit of Logon/Logoff" events. My ultimate
> objective is to create a managment report with just the essential logon
> identification information.
Logging onto the domain or just the domain controller?? If you want to audit
all user logons to the domain then enable auditing of "account logon events"
in Domain Controller Security Policy. For logons to just the domain
controller enable auditing of logon events in Domain Controller Security
Policy. It is the nature of Windows auditing to record a lot of apparently
multiple identical events for logons [don't ask me why]. There is no built
in quick and easy way to generate nice concise reports. You may want to look
at a third party program like S.E.L.M. as shown at the link below. They
offer a free trial of it.--- Steve
http://www.gfi.com/lanselm/
"jimtotem" <jimtotem@discussions.microsoft.com> wrote in message
news:158D1957-BBDD-4839-8CF7-6475B0C212D2@microsoft.com...
>I would like to record User, Computer, and Logon time for each user loging
> into our W2K, single DC, server. Something like "net sessions" but
> recording
> just the logon times. The Security Event Viewer seems to capture multiple
> events when I ask for "success audit of Logon/Logoff" events. My ultimate
> objective is to create a managment report with just the essential logon
> identification information.
Related ressources:
- ForumEvent ID 576/538 - Guest Logon
- ForumEmoticon Packs Across Messenger Logon ID 's.
- ForumLogon Screen with blank ID .
- Forumevent id 529 logon type 3 - lots of them
- ForumEvent ID 538 Logon Type 3 NT AUTHORITY/ANONYMOUS LOGON
- ForumEvent ID 538 & 540 whenuser did not logon
- Forumevent id 529 logon failure
- ForumUser group client failed the logon
- ForumAuditing User logon /logoff events.
- ForumEventID 534: User has not been granted requested logon type
- ForumUser logon v. User logon (pre-Windows 2000)
- ForumMoving User from OU=A to OU=B still runs OU=A logon script..
- ForumSlow user Logon and frozen taskbar - Take 2!
- Forumlog on id privileges too secure - user can't log on/locked..
- ForumCreating new default user id
- ForumParallel and com ports not appearing in device manager
- ForumHow to detect user logon rights on win2k/xp?
- ForumMulti user logon to same Win2000 programs
- ForumSetting "User Must Change Password at next Logon" via scri..
- ForumUser account logon to domain
- More resources
!
