Monitor user and computer activity

Hello experts,
I have a small network with less than 100 users and need a software to allow me to see who is currently logged on or the last time they logged on (in case the locked the computer), and the last time they logged off.  I also want to be able to see when was the last time the computer got restarted.  Is there any free or in expensive application that will allow me to do that?
Thanks,
Bill
LVL 2
bilalahaAsked:
Who is Participating?
 
SouljaCommented:
What are they logging into? Active Directory?
0
Protect Your Employees from Wi-Fi Threats

As Wi-Fi growth and popularity continues to climb, not everyone understands the risks that come with connecting to public Wi-Fi or even offering Wi-Fi to employees, visitors and guests. Download the resource kit to make sure your safe wherever business takes you!

 
jason_0573Commented:
PsLoggedOn from Sysinternals is what you need. Simple easy command line interface. A lot of the tools from Sysinternals used to be MS sponsored. Mark Russinovich created dozens of useful Sys/Network/Security admin tools. Technet still sponsors his work.

http://technet.microsoft.com/en-us/sysinternals/bb897545

0
 
jason_0573Commented:
To Determine when the computer last rebooted, make sure you have your Group Policy Auditing turned on for System Events.
GPO: Computer Configuration\Windows Settings\Security Settings\Local Policies\Audit Policy

Once enabled, a Reboot trigger recognized by the event log service being shut down. It is an EVENT id :6006

0
 
bilalahaAuthor Commented:
The ADAudit Plus is very expensive "$1500" for two DC 1 file servers and several member server.

PsLoggedOn  and the Group policy will require to be viewing the logs on every machine and checking who is connected.

Any other ideas for softweare to use?
0
 
jason_0573Commented:
PsloggedOn can be ran from any machine on the network if you have admin rights.
Create a batch file to run it for the multiple computers you specify.

You can create and administrative VB Script to capture event log information and compile it.
MS has one in their KB
http://support.microsoft.com/kb/318763
0
 
bilalahaAuthor Commented:
Thanks.  The scrips need a lot of tweeking to make them work and it is a lot of work to get the data every time.  But it will do until I find another solution.
0
 
bilalahaAuthor Commented:
The technet scrips work, but require some tweeking and the information it provides is sufficien, but it is a lot of manual work to get the data needed.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.