Active Directory: Monitoring Local and Remote Logins

Hello Experts!

    What would be the best way to monitor local and remote log-ins with the same account?  For example, lets say that I wanted to see if someone was logging in normally with their network account but also logging in remotely (via VPN) with their account as well.  Sharing their credentials in other words.    

      e.g.  I log into my account with my network credentials, then call John Doe and and share my log in credentials with him.  He then logs in via the VPN with my credentials.  Is there a way to track that or a script of some sort that could help keep tabs on this behavior?
Who is Participating?
Pankaj_401Connect With a Mentor Commented:
Hi Itsm,
You can download AD auditor tool from this MS-networking utility link( to monitor local and remote log-ins in active directory.
Additionally, you can have also explore this link( which seems fit in your required AD environment.
VirastaRConnect With a Mentor UC Tech Consultant Commented:

You can achieve this through reviewing Security Events

Tracking User Logon Activity Using Logon Events

PFA - Quick Reference Charts of Events.

Hope that helps :)
itsmevicAuthor Commented:
Fantastic input, thank you both!
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.