Solved

Track for Reporting Login and Logoff Times by User Account

Posted on 2010-08-31
3
1,701 Views
Last Modified: 2013-12-04
I wish to create some sort of logging of when user's log in and log off.  Currently, our PDC is a server 2008 r2 machine, and I am capturing login and logoff times through the event viewer.  However, I do not know how to export the event viewer audits to a format in which I can do reporting.

How does everyone else out there track this information?  The only pieces of data I need are the username, login time, and logoff time, and the date of login / logoff.

I would like this to be an automated process in which the data is automatically dumped into a file of any sort, so I can import it into a database for reporting.

I also have been playing around with PA Power Admin, as we have the software currently, to see if I can log the events that way.
0
Comment
Question by:dzirkelb
  • 2
3 Comments
 

Author Comment

by:dzirkelb
ID: 33571343
If at all possible, i would like to not have to purchase any third party software; however, if there are no other optins, then I will entertain that idea.
0
 
LVL 13

Accepted Solution

by:
Greg Hejl earned 500 total points
ID: 33573186
Here you go -

Play with this: http://technet.microsoft.com/en-us/library/ee692660.aspx

and here's a sample that looks like what you are looking for:

http://technet.microsoft.com/en-us/library/ee692659.aspx

have fun!
0
 

Author Comment

by:dzirkelb
ID: 33577319
Getting closer...I think this should work...thanks!

I'll post a new topic to question how to work with this, as I have some syntax questions and specific Event ID questions.  I'll leave this open for a couple days in case anyone has any other options.
0

Featured Post

Threat Intelligence Starter Resources

Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

Join & Write a Comment

Even if you have implemented a Mobile Device Management solution company wide, it is a good idea to make sure you are taking into account all of the major risks to your electronic protected health information (ePHI).
Container Orchestration platforms empower organizations to scale their apps at an exceptional rate. This is the reason numerous innovation-driven companies are moving apps to an appropriated datacenter wide platform that empowers them to scale at a …
This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…
This tutorial will walk an individual through the steps necessary to install and configure the Windows Server Backup Utility. Directly connect an external storage device such as a USB drive, or CD\DVD burner: If the device is a USB drive, ensure i…

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now