|
Posted by Bryce on November 4, 2006, 12:13 am
Please log in for more thread options Perfect.
Thanks!
> You would need to enable auditing of "logon" events and track usage for
> users in question via the local security logs of the computers they logon
> to. There are third party programs that can help automate event log
> tracking such as SELM that I believe is free to try. When you enable
> auditing of account logon events for DCs it will only show when a user
> logos onto the domain. When you audit logon events on DCs it will show
> when users/computers access a share on the DCs such as sysvol share for GP
> processing and that will generate a ton of events in the security log for
> the DCs.
>
> Steve
>
> http://www.gfi.com/lanselm/ --- SELM
>
> "Bryce" <fukuzz---at---hotmail---dot---com> wrote in message
>> Is 680 the only security event to find out when someone has logged on in
>> the morning?
>>
>> Is there an automated way to find out when someone has logged on and
>> logged off over a 3 week period?
>>
>> Windows 2003 Server.
>>
>> Thanks.
>>
>> Bryce.
>>
>
>
| 
XML Sitemap