Track logon / logoff times for a user ?

Posted on 2006-04-17
Last Modified: 2012-08-14
Is there a way to see, for a specific user, the exact logon and logoff times for the past couple of weeks ?

We are trying to determine how much time a home user actually worked!

Question by:raket
    LVL 33

    Accepted Solution

    Yes, on the local machine look for this:

    Event Type:      Success Audit
    Event Source:      Security
    Event Category:      Logon/Logoff
    Event ID:      528
    Date:            4/17/2006
    Time:            7:40:09 AM

    User:            US\poandjo
    Computer:      USWorkstation
    Successful Logon:
           User Name:      userXYZ
           Domain:            workdomain
           Logon ID:            (0x0,0x23822)
           Logon Type:      11
           Logon Process:      User32  
           Authentication Package:      Negotiate
           Workstation Name:      USWorkstation
           Logon GUID:      {00000000-0000-0000-0000-000000000000}

    For more information, see Help and Support Center at
    LVL 33

    Expert Comment

    you will find these in the security log...if auditing is turned on.
    LVL 33

    Expert Comment

    you can look for these messages on the domain controller security log too.

    Featured Post

    What Security Threats Are You Missing?

    Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

    Join & Write a Comment

    by Batuhan Cetin Within the dynamic life of an IT administrator, we hold many information in our minds like user names, passwords, IDs, phone numbers, incomes, service tags, bills and the order from our wives to buy milk when coming back to home.…
    I guess it is not common knowledge to most Wintel engineers/administrators: If you have an SNMP-based monitoring system in your environment (and it's common to have SNMP or Syslog) it's reasonably easy to enable monitoring of the Windows Event logs,…
    Illustrator's Shape Builder tool will let you combine shapes visually and interactively. This video shows the Mac version, but the tool works the same way in Windows. To follow along with this video, you can draw your own shapes or download the file…
    Access reports are powerful and flexible. Learn how to create a query and then a grouped report using the wizard. Modify the report design after the wizard is done to make it look better. There will be another video to explain how to put the final p…

    755 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    22 Experts available now in Live!

    Get 1:1 Help Now