• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 328
  • Last Modified:

User Loggedin/Loggedoff Information!

Dear EE,

Is there any way, we can track the information about logged in windows user was logged off for some specific date time ? in windows server 2003 Sp2 (Without using any tool)

Regards
Naveed
0
Netsol-NOS
Asked:
Netsol-NOS
  • 2
  • 2
1 Solution
 
Krzysztof PytkoActive Directory EngineerCommented:
For detailed information, you need to review all Security Event Logs on each Domain Controller or if it enough, you may check when user was logged on in a domain for the last time. If you're interested, you may visit my blog and read an article about that at
http://kpytko.wordpress.com/2012/07/30/lastlogon-vs-lastlogontimestamp/

Regards,
Krzysztof
0
 
Netsol-NOSAuthor Commented:
Thank you for prompt action,

Well i am not on domain controller. i just want to see on local server.
0
 
Krzysztof PytkoActive Directory EngineerCommented:
OK, so there is only one possibility. Review Security Event Log on that server to gather required information. Quite a lot to read :/

Krzysztof
0
 
Manoj PatilSr. Software EngineerCommented:
For Active directory user’s logon and logoff reports, it needs the third party tools. But in windows have that capability. Most of the IT professionals are not learned DOS commands in-depth. The DOS command does this process. All are heard about echo command; this command can do the report for our need.

For Example:-
Go to your command prompt, type the below following command.
Echo %username% is logged on to %computername% at %time%

The above command gives the output like his name, computer name and login time. Our need is to generate report for all users, so here we need to create a logon batch file script. Before creating the batch file, we need to create a central repository for storing the log files. Create a hidden share for logon, logoff and give the permission to users.Batch file for logon script Copy the below code edit the systemname, sharename and paste into the notepad, then save it as batch (.bat) file.
Echo %username% is logged on to %computername% at %time% >> \\systemname\Sharename$\%username%_logon.csv
The batch file needs to put on the logon script in the group policy. All log files will be save in separate for each users. Please find the below image, that was the output.


Active Directory Report

For Log off report use the below command for batch file
Echo %username% is logged on to %computername% at %time% >> \\systemname\Sharename$\%username%_logoff.csv
Copy the above code and create a batch file, apply on the logoff script in the group policy.
0
 
Netsol-NOSAuthor Commented:
True i found the user logoff and login information in security event viewer log the event id is  528 and 538.
0

Featured Post

Get free NFR key for Veeam Availability Suite 9.5

Veeam is happy to provide a free NFR license (1 year, 2 sockets) to all certified IT Pros. The license allows for the non-production use of Veeam Availability Suite v9.5 in your home lab, without any feature limitations. It works for both VMware and Hyper-V environments

  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now