How to log network logon and logoff activity?
Posted on 2003-03-11
As an end result, I would like to have a log that will record when each user logs on to and off of my network. The kinds of questions I'm going to need to answer are "At what times did Joe Smith logon and logoff on March 5th?
I know I can use tools like usrstat to see last logon information. I have also been using auditing to create logon/logoff events in the security log. For the event log, it seems like every time a user connects to a resource it creates a logon/logoff event. Oh yeah, and it doesn't say if it's a logon or a logoff, so that really doesn't help me too much.
Any help or 3rd party software recommendations would be appreciated.