Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 543
  • Last Modified:

Ability to Monitor User's Logon/Logoff Activity from a Workstation

Hello Experts,

I am looking for "custom" ideas on how to centrally monitor user logon/logoff activity.

EXACTLY what we need:

Monitor workstations in domain and record Logon/Logoff activity.
(Already have GPO settings for this: "Audit account logon events", "audit logon events")

I need to pull only certain logs (Logon/Logoff) from workstation, AND I need this to be an automated process.

Can this be done? If so, how?

Any ideas?

Thanks.
0
mmoya
Asked:
mmoya
2 Solutions
 
rscottvanCommented:
If the systems are Win7, you can configure a central system as an event collector:
http://msdn.microsoft.com/en-us/library/bb427443(v=vs.85).aspx


Or there are log management products like Tripwire Log Center, which I recommend (though it's spendy):
http://www.tripwire.com/it-compliance-products/log-event-management/

And dozens of other products:
http://tinyurl.com/3buhl7y
0
 
x3manCommented:
This can be achieved with simple logon/logoff script that writes details to a central log file. Have a look at my previous answer to a similar question, hopefully this will help: http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/2003_Server/Q_26601738.html 
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Tackle projects and never again get stuck behind a technical roadblock.
Join Now