How to log network logon and logoff activity?

Posted on 2003-03-11
Medium Priority
Last Modified: 2013-12-04
  As an end result, I would like to have a log that will record when each user logs on to and off of my network.  The kinds of questions I'm going to need to answer are "At what times did Joe Smith logon and logoff on March 5th?
   I know I can use tools like usrstat to see last logon information.  I have also been using auditing to create logon/logoff events in the security log.  For the event log, it seems like every time a user connects to a resource it creates a logon/logoff event.  Oh yeah, and it doesn't say if it's a logon or a logoff, so that really doesn't help me too much.
   Any help or 3rd party software recommendations would be appreciated.
Question by:Dougget
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
LVL 12

Accepted Solution

trywaredk earned 336 total points
ID: 8114962
You can script Your own record of logons using Windows Scripting Host in or as Your LogonScript:

Dim wshNetwork, sUser
Dim fso, f, outputfile

Set wshNetwork = wScript.CreateObject( "wScript.Network" )
sUser = wshNetwork.username

outputfile = "G:\YourChoise\" & sUser & ".log"

Set fso = CreateObject("Scripting.FileSystemObject")
Set f = fso.OpenTextFile(outputfile, ForWriting, True)

  f.Writeline "LogonTime:  " & Time
  f.Writeline "LogonDate:  " & Date


Set wshNetwork = Nothing


Assisted Solution

MSGeek earned 332 total points
ID: 8115618

Assisted Solution

HO_leg earned 332 total points
ID: 8117470
There is very nice software by LanGuard - Security Event Log Monitor.
This product copies Security Event Logs to central database, produces great reports. You can download trial version.
Good luck!
LVL 12

Expert Comment

ID: 8128418
If You are running W2k-AD-server, then make 2 scripts as I told You above, one for login, and another for logout.

Attach the 2 scripts according to http://support.microsoft.com/default.aspx?scid=kb%3Ben-us%3B198642

Expert Comment

ID: 9070747
This old question needs to be finalized -- accept an answer, split points, or get a refund.  For information on your options, please click here-> http:/help/closing.jsp#1 
Post your closing recommendations!  No comment means you don't care.

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In today's information driven age, entrepreneurs have so many great tools and options at their disposal to help turn good ideas into a thriving business. With cloud-based online services, such as Amazon's Web Services (AWS) or Microsoft's Azure, bus…
Recently, I read that Microsoft has analysed statistics for their security intelligence report. It revealed: still, the clear majority of windows users do their daily work as administrator. An administrative account is a burden, security-wise. My ar…
Sometimes it takes a new vantage point, apart from our everyday security practices, to truly see our Active Directory (AD) vulnerabilities. We get used to implementing the same techniques and checking the same areas for a breach. This pattern can re…
In this video, Percona Director of Solution Engineering Jon Tobin discusses the function and features of Percona Server for MongoDB. How Percona can help Percona can help you determine if Percona Server for MongoDB is the right solution for …
Suggested Courses
Course of the Month12 days, 15 hours left to enroll

777 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question