user logon autiding

I'm trying to track down the logon/logout activity for a user's remote desktop session or at least when they logged into the computer..  Is this possible by default or do I need login auditing enabled?  What about the DC?  I guess that stands true for the DC too?
gopher_49Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

LazarusCommented:
You might approach it a different way, what I do is run a GPO that runs a login script and logoff script that makes an individual CSV file for each user, into a folder. That way I can look up the individual user quickly and it tells me what computer they logged into on the network and when as well as when they logoff of it.

just a 2 simple bat files:
Login.bat
echo %date%,%time%,%computername%,%username%,%sessionname%,%logonserver%,LOGON >> \\yourcompany.com\LOGS\%username%_logs.csv

Logoff.bat
echo %date%,%time%,%computername%,%username%,%sessionname%,%logonserver%,LOGOFF >> \\yourcompany.com\LOGS\%username%_logs.csv

Run them from your GPO's under:
User Configuration/Windows Settings/Scripts (Logon/Logoff)
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
gopher_49Author Commented:
Too little too late..  Is this possible by default?
0
LazarusCommented:
0
gopher_49Author Commented:
lazzarus98,

The logon/logoff events are only displayed is the local group policy has user logon auditing turned on.  It is not turned on right now so the information I need will not be in the event log I guess.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2003

From novice to tech pro — start learning today.