Solved

User access Logging

Posted on 2012-04-09
6
490 Views
Last Modified: 2012-08-13
Hello All,

I'm trying to see if it's possible to see how many times a user has logged into a terminal server (specific dates, times, etc.)

Is this something that is possible?
0
Comment
Question by:Timothy McCartney
  • 2
  • 2
  • 2
6 Comments
 
LVL 37

Expert Comment

by:Neil Russell
ID: 37823382
Easiest way is with your login script.  Just have it output to a text log file somewhere with the computername, user name, date, time, LOGON or LOGOFF
0
 
LVL 9

Author Comment

by:Timothy McCartney
ID: 37823392
Not positive exactly how one would do that, could you elaborate a little bit more?

Also, if this option had not been in place, is there another way to find this information out? We've had a bit of a security issue and need to try to determine when a user has been logging into a particular sever.
0
 
LVL 17

Expert Comment

by:Anuroopsundd
ID: 37823402
you can check in the event log for the user login and logoff.
Event IDs 528 and 540 signify a successful logon, event ID 538 a logoff
0
Backup Your Microsoft Windows Server®

Backup all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

 
LVL 17

Expert Comment

by:Anuroopsundd
ID: 37823407
0
 
LVL 37

Accepted Solution

by:
Neil Russell earned 500 total points
ID: 37823431
The event log will ONLY be any use if you have enabled all the correct Auditing policies AND will only be as useful as the size of your event log allows.....

in a log in script just do something like.....

echo User %USERNAME% logged into computer %COMPUTERNAME% on %DATE% at %TIME% >> \\servername\logins$\logons.log
0
 
LVL 9

Author Closing Comment

by:Timothy McCartney
ID: 37824107
It looks like the required auditing policies were not in place. The security log only shows a handful of entries, none of which are related to logons/offs.
0

Featured Post

Enterprise Mobility and BYOD For Dummies

Like “For Dummies” books, you can read this in whatever order you choose and learn about mobility and BYOD; and how to put a competitive mobile infrastructure in place. Developed for SMBs and large enterprises alike, you will find helpful use cases, planning, and implementation.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Scenerio: You have a server running Server 2003 and have applied a retail pack of Terminal Server Licenses.  You want to change servers or your server has crashed and you need to reapply the Terminal Server Licenses. When you enter the 16-digit lic…
A quick step-by-step overview of installing and configuring Carbonite Server Backup.
This is used to tweak the memory usage for your computer, it is used for servers more so than workstations but just be careful editing registry settings as it may cause irreversible results. I hold no responsibility for anything you do to the regist…
Video by: Mark
This lesson goes over how to construct ordered and unordered lists and how to create hyperlinks.

895 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now