Hello Experts,
I am looking for "custom" ideas on how to centrally monitor user logon/logoff activity. Found some software out there that can monitor these things, but nothing out there to do exactly what we need.
EXACTLY what we need:
Monitor workstations in domain and record Logon/Logoff activity.
(Already have GPO settings for this: "Audit account logon events", "audit logon events")
Need to pull this info from workstations to central server. This is easily done manually, by going to the Event Log on Server and "Connect to remote machine", then pull the logs.
However, I need to pull only certain logs (Logon/Logoff) from workstation, AND I need this to be an automated process.
Can this be done? If so, how?
Any ideas?
Thanks.
Start Free Trial