[Last Call] Learn how to a build a cloud-first strategyRegister Now

x
?
Solved

Monitor user and computer activity

Posted on 2011-10-11
9
Medium Priority
?
210 Views
Last Modified: 2012-05-12
Hello experts,
I have a small network with less than 100 users and need a software to allow me to see who is currently logged on or the last time they logged on (in case the locked the computer), and the last time they logged off.  I also want to be able to see when was the last time the computer got restarted.  Is there any free or in expensive application that will allow me to do that?
Thanks,
Bill
0
Comment
Question by:bilalaha
  • 4
  • 3
  • 2
9 Comments
 
LVL 26

Expert Comment

by:Soulja
ID: 36950884
What are they logging into? Active Directory?
0
 
LVL 26

Expert Comment

by:Soulja
ID: 36950894
0
 
LVL 4

Expert Comment

by:jason_0573
ID: 36951255
PsLoggedOn from Sysinternals is what you need. Simple easy command line interface. A lot of the tools from Sysinternals used to be MS sponsored. Mark Russinovich created dozens of useful Sys/Network/Security admin tools. Technet still sponsors his work.

http://technet.microsoft.com/en-us/sysinternals/bb897545

0
New Tabletop Appliances Blow Competitors Away!

WatchGuard’s new T15, T35 and T55 tabletop UTMs provide the highest-performing security inspection in their class, allowing users at small offices, home offices and distributed enterprises to experience blazing-fast Internet speeds without sacrificing enterprise-grade security.

 
LVL 4

Expert Comment

by:jason_0573
ID: 36951513
To Determine when the computer last rebooted, make sure you have your Group Policy Auditing turned on for System Events.
GPO: Computer Configuration\Windows Settings\Security Settings\Local Policies\Audit Policy

Once enabled, a Reboot trigger recognized by the event log service being shut down. It is an EVENT id :6006

0
 
LVL 2

Author Comment

by:bilalaha
ID: 36963080
The ADAudit Plus is very expensive "$1500" for two DC 1 file servers and several member server.

PsLoggedOn  and the Group policy will require to be viewing the logs on every machine and checking who is connected.

Any other ideas for softweare to use?
0
 
LVL 4

Expert Comment

by:jason_0573
ID: 36966211
PsloggedOn can be ran from any machine on the network if you have admin rights.
Create a batch file to run it for the multiple computers you specify.

You can create and administrative VB Script to capture event log information and compile it.
MS has one in their KB
http://support.microsoft.com/kb/318763
0
 
LVL 4

Accepted Solution

by:
jason_0573 earned 1500 total points
ID: 36966236
0
 
LVL 2

Author Comment

by:bilalaha
ID: 37018390
Thanks.  The scrips need a lot of tweeking to make them work and it is a lot of work to get the data every time.  But it will do until I find another solution.
0
 
LVL 2

Author Closing Comment

by:bilalaha
ID: 37018399
The technet scrips work, but require some tweeking and the information it provides is sufficien, but it is a lot of manual work to get the data needed.
0

Featured Post

When ransomware hits your clients, what do you do?

MSPs: Endpoint security isn’t enough to prevent ransomware.
As the impact and severity of crypto ransomware attacks has grown, Webroot has fought back, not just by building a next-gen endpoint solution capable of preventing ransomware attacks but also by being a thought leader.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

As companies replace their old PBX phone systems with Unified IP Communications, many are finding out that legacy applications such as fax do not work well with VoIP. Fortunately, Cloud Faxing provides a cost-effective alternative that works over an…
This article will show you step-by-step instructions to build your own NTP CentOS server.  The network diagram shows the best practice to setup the NTP server farm for redundancy.  This article also serves as your NTP server documentation.
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…
Monitoring a network: how to monitor network services and why? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the philosophy behind service monitoring and why a handshake validation is critical in network monitoring. Software utilized …
Suggested Courses

834 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question