Solved

Active Directory User Statistics

Posted on 2008-10-13
2
434 Views
Last Modified: 2008-10-13
Is there some sort of script or program that you can run to see what users were logged into the domain at specific periods of the day.  I've done some searches but haven't had much luck.

One of the board members wants us to change our hours, and possibly have someone from the help desk work on the weekends, and I'd like to find something to see how many people may log in after our normal business hours.

Thank you in advance for your help.
0
Comment
Question by:cjrcomputers
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 16

Expert Comment

by:speshalyst
ID: 22702775
you can use the Audit features on the AD
http://support.microsoft.com/kb/814595
Please check this post... this should give u a better insight..
http://ask.metafilter.com/71702/User-auditing-in-Windows-Server-2003 
0
 
LVL 18

Accepted Solution

by:
sk_raja_raja earned 500 total points
ID: 22703653
1.http://www.windowsecurity.com/articles/Security-Configuration-Wizard-Windows-Server-2003-SP1.html
auditing needs to be set on the domain controllers policy

2.You first have to enable the auditing login/logout option in the GPO Computer configuration/windows settings/security settings/local policies/audit policy/.

Once enabled, the login/logout events will be logged in the security log on the DC's event log.
You can then scan through the security log.

Try http://www.microsoft.com/technet/sysinternals/default.mspx.  I would think the above change to the GPO of the computers would be a requirement.

Ref the below posts for scripting,
http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/2003_Server/Q_21686950.html
http://www.experts-exchange.com/OS/Miscellaneous/Q_22099227.html
0

Featured Post

NEW Veeam Agent for Microsoft Windows

Backup and recover physical and cloud-based servers and workstations, as well as endpoint devices that belong to remote users. Avoid downtime and data loss quickly and easily for Windows-based physical or public cloud-based workloads!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article shows the method of using the Resultant Set of Policy Tool to locate Group Policy that applies a particular setting.
Auditing domain password hashes is a commonly overlooked but critical requirement to ensuring secure passwords practices are followed. Methods exist to extract hashes directly for a live domain however this article describes a process to extract u…
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

691 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question