Solved

How to audit user's session time on Windows 2003

Posted on 2009-04-06
5
381 Views
Last Modified: 2012-05-06
Hi Experts:

I need to a report to tell me how long a user's session time is. Could someone tell me how to get this information on Windows server 2003?
The server is not in a domain envirnment.

Thanks
0
Comment
Question by:changjia
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
5 Comments
 
LVL 31

Expert Comment

by:Justin Owens
ID: 24079343
Do you want to audit console session, TS session, or both?
0
 

Author Comment

by:changjia
ID: 24079724
both sessions.
0
 
LVL 31

Expert Comment

by:Justin Owens
ID: 24079881
I am not sure of a neat way or tool to do this automatically, but you can turn on Auditing in Server 2003 to allow for you to log both the log on times and the log off times.  You could manually calculate the different or export the logs into some sort of database to parse and calculate the info.

Alternately, you could use GPO to have login scripts and log off scripts.  When invoked, you could dump the user and time data into a SQL (or db of your choice) database.  I use login scripts and logoff scripts on various servers in my domain at a domain level GPO, but you could just as easily set up the GPO on the local machine only.  If you don't have a running DB you want to dump to, you could set up MSSQL 2005 lite (or MSDE) on your local 2003 server.
0
 

Author Comment

by:changjia
ID: 24079900
how to turn on auditing on the server to log both the log on times and log off times? what are the event id that I should look for?

Thanks

0
 
LVL 31

Accepted Solution

by:
Justin Owens earned 500 total points
ID: 24079992
To enable auditing locally in Windows Server 2003, open the Control Panel, Administrative Tools, and double click Local Security Policy. Expand Local Policies and select Audit Policy.  Look for:

Audit Account Logon Events

This tracks user logon and logoff events.
0

Featured Post

Ransomware: The New Cyber Threat & How to Stop It

This infographic explains ransomware, type of malware that blocks access to your files or your systems and holds them hostage until a ransom is paid. It also examines the different types of ransomware and explains what you can do to thwart this sinister online threat.  

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I guess it is not common knowledge to most Wintel engineers/administrators: If you have an SNMP-based monitoring system in your environment (and it's common to have SNMP or Syslog) it's reasonably easy to enable monitoring of the Windows Event logs,…
I've always wanted to allow a user to have a printer no matter where they login. The steps below will show you how to achieve just that. In this Article I'll show how to deploy printers automatically with group policy and then using security fil…
How to Install VMware Tools in Red Hat Enterprise Linux 6.4 (RHEL 6.4) Step-by-Step Tutorial

749 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question