Avatar of bubaibhatta
bubaibhatta

asked on 

Users Log on history in a domain

Hi Experts,

I want to know if there is a simple way to identify any user's login activities for past one week or so? I tried my best to search something like this but could not find any.

Our domain is on Windows 2003.
Active DirectoryVB ScriptWindows Server 2003

Avatar of undefined
Last Comment
piattnd
SOLUTION
Avatar of Sarang Tinguria
Sarang Tinguria
Flag of India image

Blurred text
THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
Avatar of Mike Kline
Mike Kline
Flag of United States of America image

Does the user generally logon from one PC or multiple?

Thanks

Mike
SOLUTION
THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
SOLUTION
Avatar of piattnd
piattnd

Blurred text
THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
Avatar of bubaibhatta
bubaibhatta

ASKER

so first thing that I need to enable auditing, right?
Avatar of piattnd
piattnd

You can use auditing from this point forward, yes.  If you need to capture data in the past though, auditing won't do any good if it's not already on and you'll need to reference the security logs.
Avatar of bubaibhatta
bubaibhatta

ASKER

Since auditing was not enable at this point of time, I have enabled that.
What should  be the next steps?
Avatar of piattnd
piattnd

You're not being too clear here, what are you trying to do?

If you need to find out who logged in when in the past week, then you enabling auditing will do nothing for achieving that task.  You need to parse through the security logs to find the information (assuming your logs go back that far)

If you don't need past data and you just want the "from here on out" data, now you sit and wait, then review the audit information.
Avatar of Pankaj_401
Pankaj_401
Flag of India image

its pretty simple with this tool you should try it at once as it audit complete AD you can as many of domain it it and get the desired reports

http://www.activedirectoryaudit.com/
Avatar of bubaibhatta
bubaibhatta

ASKER

Piattnd, sorry for my unclearity. I dont want to get into past data. I want  "from here on out" data.

Our Domain has five sites and each have one ADC in place. What I understood that when a user logs in to domain from a site, that info will be available to system log file of that site ADC. Am I correct here?

One more thing : now how to I turn on global DC Auditing ?
ASKER CERTIFIED SOLUTION
Avatar of piattnd
piattnd

Blurred text
THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
Windows Server 2003
Windows Server 2003

Windows Server 2003 was based on Windows XP and was released in four editions: Web, Standard, Enterprise and Datacenter. It also had derivative versions for clusters, storage and Microsoft’s Small Business Server. Important upgrades included integrating Internet Information Services (IIS), improvements to Active Directory (AD) and Group Policy (GP), and the migration to Automated System Recovery (ASR).

129K
Questions
--
Followers
--
Top Experts
Get a personalized solution from industry experts
Ask the experts
Read over 600 more reviews

TRUSTED BY

IBM logoIntel logoMicrosoft logoUbisoft logoSAP logo
Qualcomm logoCitrix Systems logoWorkday logoErnst & Young logo
High performer badgeUsers love us badge
LinkedIn logoFacebook logoX logoInstagram logoTikTok logoYouTube logo