Solved

when a user has logged in and off the network

Posted on 2009-07-10
6
213 Views
Last Modified: 2012-05-07
I was just asked by a memeber of management to let them know when a user has logged in today and noticed I didn't have the domain control logging in/out enabled.  I just turned it on and its working but is there anyway to tell prior to this GP being enabled?  I just need to see when they logged on today and in the past if possible.  Thank you!
0
Comment
Question by:jbishop2446b
  • 2
  • 2
  • 2
6 Comments
 
LVL 57

Expert Comment

by:Mike Kline
ID: 24826560
Do you know their machine name?  Check the security logs on their workstation.
Hope that person came in on time :)
Thanks
Mike
0
 

Author Comment

by:jbishop2446b
ID: 24826592
ha! that is exactly what they're needing me to check.  Only one entry in their security log on their machine...
0
 
LVL 57

Expert Comment

by:Mike Kline
ID: 24826679
If you didn't have auditing on before it won't go back and pull that info.  Do you all have badges where you work.  If you do it maybe worth a shot to talk to those folks and see what time the person badged in.
...or catch him next week :)
0
Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 

Author Comment

by:jbishop2446b
ID: 24826693
lol no badges, I wish... it's a single 5am guy, thank you for your help though.
0
 
LVL 38

Accepted Solution

by:
younghv earned 500 total points
ID: 24995074
I'm winging this from memory, but the DC logs should track this event as a 538 or 539 entry.
0
 
LVL 38

Expert Comment

by:younghv
ID: 24995077
jbishop2446b - another thought - you have posted this in only the 'Active Directory' Zone, which is very low on the activity scale around here.
You will get a lot more exposure if you click on the 'Request Attention' link and ask the Moderators to add in to the Server and Network Zones.
0

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This script can help you clean up your user profile database by comparing profiles to Active Directory users in a particular OU, and removing the profiles that don't match.
This article describes my battle tested process for setting up delegation. I use this process anywhere that I need to setup delegation. In the article I will show how it applies to Active Directory
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …

840 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question