Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

when a user has logged in and off the network

Posted on 2009-07-10
6
Medium Priority
?
217 Views
Last Modified: 2012-05-07
I was just asked by a memeber of management to let them know when a user has logged in today and noticed I didn't have the domain control logging in/out enabled.  I just turned it on and its working but is there anyway to tell prior to this GP being enabled?  I just need to see when they logged on today and in the past if possible.  Thank you!
0
Comment
Question by:jbishop2446b
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
  • 2
6 Comments
 
LVL 57

Expert Comment

by:Mike Kline
ID: 24826560
Do you know their machine name?  Check the security logs on their workstation.
Hope that person came in on time :)
Thanks
Mike
0
 

Author Comment

by:jbishop2446b
ID: 24826592
ha! that is exactly what they're needing me to check.  Only one entry in their security log on their machine...
0
 
LVL 57

Expert Comment

by:Mike Kline
ID: 24826679
If you didn't have auditing on before it won't go back and pull that info.  Do you all have badges where you work.  If you do it maybe worth a shot to talk to those folks and see what time the person badged in.
...or catch him next week :)
0
NFR key for Veeam Agent for Linux

Veeam is happy to provide a free NFR license for one year.  It allows for the non‑production use and valid for five workstations and two servers. Veeam Agent for Linux is a simple backup tool for your Linux installations, both on‑premises and in the public cloud.

 

Author Comment

by:jbishop2446b
ID: 24826693
lol no badges, I wish... it's a single 5am guy, thank you for your help though.
0
 
LVL 38

Accepted Solution

by:
younghv earned 2000 total points
ID: 24995074
I'm winging this from memory, but the DC logs should track this event as a 538 or 539 entry.
0
 
LVL 38

Expert Comment

by:younghv
ID: 24995077
jbishop2446b - another thought - you have posted this in only the 'Active Directory' Zone, which is very low on the activity scale around here.
You will get a lot more exposure if you click on the 'Request Attention' link and ask the Moderators to add in to the Server and Network Zones.
0

Featured Post

Visualize your virtual and backup environments

Create well-organized and polished visualizations of your virtual and backup environments when planning VMware vSphere, Microsoft Hyper-V or Veeam deployments. It helps you to gain better visibility and valuable business insights.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Active Directory security has been a hot topic of late, and for good reason. With 90% of the world’s organization using this system to manage access to all parts of their IT infrastructure, knowing how to protect against threats and keep vulnerabil…
A hard and fast method for reducing Active Directory Administrators members.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
Sometimes it takes a new vantage point, apart from our everyday security practices, to truly see our Active Directory (AD) vulnerabilities. We get used to implementing the same techniques and checking the same areas for a breach. This pattern can re…

704 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question