Solved

Needing to keep record of users past login dates on 2008 domain

Posted on 2010-09-02
2
438 Views
Last Modified: 2012-05-10
I currently manage a network of about 50 users, with all of them running windows XP. This is a Windows 2008 server environment.

Is there a way to find out, or to record the dates and times of someone logging into the network? I have looked this up and all I could find is the process of finding out "Last Login". I would like to have a kept up record of users for past days....

Thank You
0
Comment
Question by:ksharkman
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 3

Accepted Solution

by:
tonyszko earned 250 total points
ID: 33591426
Create a logon script which will execute at logon and it will store current date and time in a log on a network share or in a database. Actually database would be better as it will be easier to setup permissions for a user to execute some stored procedure but not have access to data at all (this script will execute with user privilege and it has to have ability to write it down).

Other method is to make sure that you are dumping security logs from workstations or domain controller and process them with logparser to extract these dates and store them in some location (DB preffered as it is easier to use later)

Actually I would preffer parsing event logs if I would have to approach this.
0
 
LVL 57

Assisted Solution

by:Mike Kline
Mike Kline earned 250 total points
ID: 33592387
Here is an simple login script you can use for method 1

http://msmvps.com/blogs/kwsupport/archive/2005/02/24/36942.aspx

With 50 users parsing the logs wouldn't be bad either.

Thanks

Mike
0

Featured Post

Enterprise Mobility and BYOD For Dummies

Like “For Dummies” books, you can read this in whatever order you choose and learn about mobility and BYOD; and how to put a competitive mobile infrastructure in place. Developed for SMBs and large enterprises alike, you will find helpful use cases, planning, and implementation.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
http response code 3 39
Reconfigure Corporate IP Address Scheme 2 64
Configure Windows Server 2012 time server 3 40
Duplicate SPN entries 1 24
While rebooting windows server 2003 server , it's showing "active directory rebuilding indices please wait" at startup. It took a little while for this process to complete and once we logged on not all the services were started so another reboot is …
Did you know that more than 4 billion data records have been recorded as lost or stolen since 2013? It was a staggering number brought to our attention during last week’s ManageEngine webinar, where attendees received a comprehensive look at the ma…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …

710 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question