Windows 2003 Server - Who Just Logged On

Posted on 2005-04-06
Last Modified: 2010-08-05
Hi Experts,

Is there a simple way for me to find out who has just logged onto my windows 2003 server, i want to look every now and again to see whos logged in.


Question by:belronan
    LVL 4

    Expert Comment

    Do you mean who has logged on directly to that server or are you talking about a 2003 Domain Controller and you want to know who has been authenticated by it on the network?

    You could always enable auditing and look at the security log file in Event Viewer.

    Author Comment

    yeah i would just like to know whos logged when at any one time, if auditing would do this how would i enable it.

    LVL 13

    Expert Comment

    LVL 5

    Assisted Solution

    One easy way to see who is currently connected to the domain is to -

    go to the server,
    right click on my computer
    select Manage
    expand shared folders
    and then Sessions

    that'll give you a list of all open sessions and how long people have been logged on for, you can click the connected time column heading to sort that ascending / descending.

    LVL 4

    Accepted Solution

    To enable auditing on a computer running Windows Server 2003, Windows XP, or Windows 2000

    Open the Control Panel.
    In Control Panel, double-click Administrative Tools, and then click Local Security Policy (or Domain Controller Security policy if you are on a DC).
    Then, double-click Local Policies, double-click Audit Policy, and then click the events that you want to audit. We recommend that you audit the following events:
      Audit account logon events (Success, Failure) Audit account management (Success, Failure) Audit directory service access (Failure)
      Audit logon events (Success, Failure) Audit object access (Failure) Audit policy change (Success, Failure) Audit system events (Success, Failure)


    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Maximize Your Threat Intelligence Reporting

    Reporting is one of the most important and least talked about aspects of a world-class threat intelligence program. Here’s how to do it right.

    Suggested Solutions

    Title # Comments Views Activity
    Dell Vostro 3550 unknown in network and sharing 3 59
    Slow Network 51 56
    Cat6A Cabeling 3 19
    Arista Switches 2 9
    Overview This article describes how to silently install Adobe Reader on multiple workstations, customize the installation options (accept EULA, remove desktop shortcut etc) using the Adobe Customization Wizard and install Adobe Reader font packs an…
    PRTG Network Monitor lets you monitor your bandwidth usage, so you know who is using up your bandwidth, and what they're using it for.
    Here's a very brief overview of the methods PRTG Network Monitor ( offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…
    In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor ( If you're interested in additional methods for monitoring bandwidt…

    779 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    14 Experts available now in Live!

    Get 1:1 Help Now