I am looking for "custom" ideas on how to centrally monitor user logon/logoff activity.
EXACTLY what we need:
Monitor workstations in domain and record Logon/Logoff activity.
(Already have GPO settings for this: "Audit account logon events", "audit logon events")
I need to pull only certain logs (Logon/Logoff) from workstation, AND I need this to be an automated process.
Can this be done? If so, how?