Link to home
Start Free TrialLog in
Avatar of lakshmanl
lakshmanlFlag for Afghanistan

asked on

User Logon/Logoff tracking

Hi All,
 
I am trying to track the logon/logoff activity of  users.  I have turned on "Audit Logon Events"  and when I look in the event log, I get IDs 538,576 & 540  repeatedly for the same user id.  These occur almost constantly for each user
and there can be hundreds of logon/logoff events for the same user in the
same day.

Wat have I got configured wrong?  I know our users are not actually logging on and off that often.

Thanks and regards

L
ASKER CERTIFIED SOLUTION
Avatar of mass2612
mass2612
Flag of Australia image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of lakshmanl

ASKER

Hi mass2612,

Done a bit more reading since my post.

So... what would be the best way to capture userlogon/logoff activites? - scripts in Logon/Logoff in group policy?

TIA

L