Logon Log

Posted on 2012-08-24
Last Modified: 2012-08-24
How can I tell the last time a user logged on.  Or maybe a log of log on times.

Win 2008 Active Directory.
Question by:Tim_233
    LVL 13

    Assisted Solution

    YOu can accomplish this thru auditing.  Unfortunately, this won't go back in time before auditing was enabled.  Once it's enabled you can keep track of logins from that point forward.

    Computer COnfiguration -> Windows Settings -> Security Settings -> Local Policies -> Audit Policy

    Audit Account logon events
    Audit Logon Events

    All logins will show up in the Security log for that machine.
    LVL 12

    Accepted Solution

    This is one way to accompish what you're after however it's very difficult to sift through the logs and find what you're after. I find that the clearest "free" way to achieve what you're after is through logon and logoff scripts. Create a folder on your server that's writable by everyone then create the following scripts.

    Logon script:

    echo %date% %time% - logged on to %computername% >> \\servername\LogonLogs\%username%.txt

    Logoff Script:

    echo %date% %time% - logged off %computername% >> \\servername\LogonLogs\%username%.txt

    These logs will build up over time so you should either clean them manually every so often or create a sheduled maintenance script.

    Featured Post

    How your wiki can always stay up-to-date

    Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
    - Increase transparency
    - Onboard new hires faster
    - Access from mobile/offline

    Join & Write a Comment

    Recently, I was asked to look into SCCM 2007 by my employer, having a degree of experience of earlier versions of SMS and some previous SCCM knowledge I didn't expect the procedure to involve to much time. I read a number of guides concerning it…
    Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
    This tutorial will walk an individual through the steps necessary to configure their installation of BackupExec 2012 to use network shared disk space. Verify that the path to the shared storage is valid and that data can be written to that location:…
    To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…

    728 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    17 Experts available now in Live!

    Get 1:1 Help Now