How to audit user's session time on Windows 2003

Hi Experts:

I need to a report to tell me how long a user's session time is. Could someone tell me how to get this information on Windows server 2003?
The server is not in a domain envirnment.

Thanks
changjiaAsked:
Who is Participating?
 
Justin OwensConnect With a Mentor ITIL Problem ManagerCommented:
To enable auditing locally in Windows Server 2003, open the Control Panel, Administrative Tools, and double click Local Security Policy. Expand Local Policies and select Audit Policy.  Look for:

Audit Account Logon Events

This tracks user logon and logoff events.
0
 
Justin OwensITIL Problem ManagerCommented:
Do you want to audit console session, TS session, or both?
0
 
changjiaAuthor Commented:
both sessions.
0
 
Justin OwensITIL Problem ManagerCommented:
I am not sure of a neat way or tool to do this automatically, but you can turn on Auditing in Server 2003 to allow for you to log both the log on times and the log off times.  You could manually calculate the different or export the logs into some sort of database to parse and calculate the info.

Alternately, you could use GPO to have login scripts and log off scripts.  When invoked, you could dump the user and time data into a SQL (or db of your choice) database.  I use login scripts and logoff scripts on various servers in my domain at a domain level GPO, but you could just as easily set up the GPO on the local machine only.  If you don't have a running DB you want to dump to, you could set up MSSQL 2005 lite (or MSDE) on your local 2003 server.
0
 
changjiaAuthor Commented:
how to turn on auditing on the server to log both the log on times and log off times? what are the event id that I should look for?

Thanks

0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.