Track logon / logoff times for a user ?

Posted on 2006-04-17
Medium Priority
Last Modified: 2012-08-14
Is there a way to see, for a specific user, the exact logon and logoff times for the past couple of weeks ?

We are trying to determine how much time a home user actually worked!

Question by:raket
  • 3
LVL 33

Accepted Solution

NJComputerNetworks earned 500 total points
ID: 16469591
Yes, on the local machine look for this:

Event Type:      Success Audit
Event Source:      Security
Event Category:      Logon/Logoff
Event ID:      528
Date:            4/17/2006
Time:            7:40:09 AM

User:            US\poandjo
Computer:      USWorkstation
Successful Logon:
       User Name:      userXYZ
       Domain:            workdomain
       Logon ID:            (0x0,0x23822)
       Logon Type:      11
       Logon Process:      User32  
       Authentication Package:      Negotiate
       Workstation Name:      USWorkstation
       Logon GUID:      {00000000-0000-0000-0000-000000000000}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
LVL 33

Expert Comment

ID: 16469599
you will find these in the security log...if auditing is turned on.
LVL 33

Expert Comment

ID: 16469602
you can look for these messages on the domain controller security log too.

Featured Post

Efficient way to get backups off site to Azure

This user guide provides instructions on how to deploy and configure both a StoneFly Scale Out NAS Enterprise Cloud Drive virtual machine and Veeam Cloud Connect in the Microsoft Azure Cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Organizations create, modify, and maintain huge amounts of data to help their businesses earn money and generally function.  Typically every network user within an organization has a bit of disk space to store in process items and personal files.   …
This article provides a convenient collection of links to Microsoft provided Security Patches for operating systems that have reached their End of Life support cycle. Included operating systems covered by this article are Windows XP,  Windows Server…
Integration Management Part 2
Please read the paragraph below before following the instructions in the video — there are important caveats in the paragraph that I did not mention in the video. If your PaperPort 12 or PaperPort 14 is failing to start, or crashing, or hanging, …

809 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question