Solved

Monitor Logins

Posted on 2010-11-09
5
589 Views
Last Modified: 2012-05-10
HI

We have 200 PCs in a library at are college and we want to monitor which student are logging into them on a daily basis. We want log files generated and stored on ONE central server.

I know we can enable auditing but that creates events in the security log on the DC that logs the student in. We have got loads of domain controllers here and the IT director doesn't want to be trawling through event viewer on all of them.

Here is the kicker. We are trying to find a way of doing this for free. Does someone have a script or something?

Many thanks
0
Comment
Question by:dth123
5 Comments
 
LVL 27

Expert Comment

by:KenMcF
ID: 34092389
the best solution would be some type of log management system. Take a look at Splunk.
You will also need to check your auditing level.

http://www.splunk.com/

http://www.nagios.org/products/enterprisesolutions/splunk

http://technet.microsoft.com/en-us/library/dd772662(WS.10).aspx
0
 
LVL 7

Expert Comment

by:Ronin_1
ID: 34092406
You could use the eventcomb utility from Microsoft to consolidate the events into a single file. See the following for more details:

http://support.microsoft.com/kb/824209


0
 
LVL 9

Expert Comment

by:x3man
ID: 34092465
To record user logons to a text file (log.txt) containing computer name, time and date etc. I add a logon script to the group policy settings for the users concerned that contains the following (saved as a vbs file):


Option Explicit
Dim Message
Dim WshShell, objEnv
Dim objFSO, objFolder, objShell, objTextFile, objFile
Dim strDirectory, strFile, strText, strTestForDir
strDirectory = "\\servername\logs$"
strFile = "\log.txt"

' Get the WshShell object.
Set WshShell = CreateObject("WScript.Shell")

' Get collection by using the Environment property.
Set objEnv = WshShell.Environment("Process")

' Create the File System Object
Set objFSO = CreateObject("Scripting.FileSystemObject")

Set objFolder = objFSO.GetFolder(strDirectory)

Message="Logon"
set objFile = nothing
set objFolder = nothing

Const ForAppending = 8

Set objTextFile = objFSO.OpenTextFile _
(strDirectory & strFile, ForAppending, True)
Message = objEnv("Username") & "," & objEnv("computername") & "," & Time & "," & date & "," & Message
' Writes message every time you run this VBScript
objTextFile.WriteLine(Message)
objTextFile.Close

WScript.Quit

' End of VBScript to write to a file with error-correcting Code
0
 
LVL 9

Accepted Solution

by:
x3man earned 500 total points
ID: 34092527
If you only want to monitor users when they log on to the library PCs and not other PCs then you can use loopback processing in merge mode to apply the logon script above to the library PCs only. For more info about loopback processing see the article written by Arenar: http://www.experts-exchange.com/Software/Server_Software/File_Servers/Active_Directory/A_1876-Understanding-Group-Policy-Loopback-Processing.html
0
 

Author Comment

by:dth123
ID: 34092766
x3man, that's what I'm after. Nice one
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Is your Office 365 signature not working the way you want it to? Are signature updates taking up too much of your time? Let's run through the most common problems that an IT administrator can encounter when dealing with Office 365 email signatures.
Last week, our Skyport webinar on “How to secure your Active Directory” (https://www.experts-exchange.com/videos/5810/Webinar-Is-Your-Active-Directory-as-Secure-as-You-Think.html?cid=Gene_Skyport) provided 218 attendees with a step-by-step guide for…
This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

831 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question