log in times

Posted on 2010-01-08
Last Modified: 2012-05-08

is there some way I can see when someone logs in to the network? We are using windows 2003 server with AD.
Question by:msh069
    LVL 6

    Accepted Solution

    Check out this article.

    This link will inlighten you the subject matter

    Check out the various categories on the left!
    LVL 3

    Assisted Solution

    If you need a real-time alert, a recurring script or service would have to be written.  But if looking up the last logon time of a user would suffice, Windows 2003 AD replicates an attribute called lastLogonTimestamp.  This can be viewed with advanced tools like LDP or ADSIEdit, but you can also get a new tab in your "Active Directory Users and Computers" if you register a DLL called acctinfo.dll available in the Windows 2003 Resource Kit - downloaded from:  You could also install Account Lockout and Management Tools to get the DLL -

    The new tab the DLL makes available includes things like last logon time, last bad logon against a particular dc, user SID, etc.

    I hear there might be a bug in acctinfo.dll though resulting in an incorrect last logon time being displayed.  If you find that the information is indeed incorrect in your environment, there is an unreleased but improved acctinfo2.dll floating around the internet you might be able to track down.
    LVL 76

    Assisted Solution

    GPO login script .bat:
    echo on %DATE% %TIME%, %USERNAME% logged in on %COMPUTERNAME% using %LOGONSERVER% server to authenticate connecting on %SESSIONNAME% >> \\server\share\logon_logoff.txt

    Creating the same as a logout script will work the same way. A record will not be present if the system powers off (hard).  no logout porcess started/used.

    Featured Post

    How to run any project with ease

    Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
    - Combine task lists, docs, spreadsheets, and chat in one
    - View and edit from mobile/offline
    - Cut down on emails

    Join & Write a Comment

    This article describes how to set permissions to allow a limited-permissions user to start and stop a particular System Service.   It is always best to give users only the permissions that they need to perform their job, so tweaking particular permi…
    The way I use Experts Exchange to assist me in analyzing and diagnosing a problem is I first enter a Verbose Question at Experts Exchange like: Office 2007 will hang when opening and saving files I then launch WordPad (any text editor will do) an…
    Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…
    Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…

    745 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    18 Experts available now in Live!

    Get 1:1 Help Now