View a Log of all users that logged in and what they did?

Posted on 2009-05-20
Medium Priority
Last Modified: 2012-05-07
Hey guys,

I am wondering if there is a way to view a log of all users that logged into the server and what time they logged in.  Ideally, I could see what exactly they did, but I at least need to see who has been logging in and when they have been logging in.

Any help would be greated appreciated!

Question by:Triality
  • 2
  • 2

Expert Comment

ID: 24442710
If you have logon events auditing enabled in group policy, you can look at the security log in event viewer to see who has logged on.

Author Comment

ID: 24443508
Matheus, do you know how to enable this?  Sounds like what I need.

Accepted Solution

MatheusM earned 2000 total points
ID: 24443556
Definitely, you can use the group policy editor MMC snapin or simply start the Group Policy Management too from the administrative tools menu.  From there browse to your domain controllers object, open it and right click the default domain controllers group policy object.  Select edit.

From there:
Computer Configuration -> Policies -> Windows Settings -> Security Settings -> Local Policies -> Audit Policy.

Select the audits you want the server to perform and define success or failure auditing, or both.  You can read an explanation of each audit item to see if you would like to enable it.  After you've finished, go out and right click on the Default Domain Controllers Policy again and make sure there is a check next to Enforced.  After you finish this, you should start receiving audits shortly.

Author Closing Comment

ID: 31583810

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Scenario:  You do full backups to a internal hard drive in either product (SBS or Server 2008).  All goes well for a very long time.  One day, backups begin to fail with a message that the disk is full.  Your disk contains many, many more backups th…
For anyone that has accidentally used newSID with Server 2008 R2 (like I did) and hasn't been able to get the server running again because you were unlucky (as I was) and had no backups - I was able to get things working by doing a Registry Hive rec…
This tutorial will walk an individual through the steps necessary to configure their installation of BackupExec 2012 to use network shared disk space. Verify that the path to the shared storage is valid and that data can be written to that location:…
This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…
Suggested Courses

600 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question