Solved

Window 2012 Server Audit

Posted on 2016-08-18
5
29 Views
Last Modified: 2016-09-08
I want to audit a user in our domain on when they have logged in and logged out of the domain for the last week.

Where could I find this information?

Thanks!

Kevin
0
Comment
Question by:kheaney
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
5 Comments
 
LVL 30

Accepted Solution

by:
Rich Weissler earned 250 total points (awarded by participants)
ID: 41761451
On the domain controller(s) in the Security Event Log*.

*Assumes that you had the auditing security policy configured for the last week.
0
 

Author Comment

by:kheaney
ID: 41761467
Is there a way to audit logon/logoff on the local computer itself?
0
 
LVL 30

Assisted Solution

by:Rich Weissler
Rich Weissler earned 250 total points (awarded by participants)
ID: 41761485
Yes.  It'll be in the Security Event Log on the local computer, but only for login/logoff events while auditing security policy for login/logoff events is turned on for the local computer.
0
 
LVL 1

Assisted Solution

by:saumik belel
saumik belel earned 250 total points (awarded by participants)
ID: 41763703
Have a look on below given informative blog post:

How to Audit Successful Logon/Logoff and Failed Logons in Active Directory: http://www.lepide.com/blog/audit-successful-logon-logoff-and-failed-logons-in-activedirectory/
0
 
LVL 30

Expert Comment

by:Rich Weissler
ID: 41789221
Question abandoned
0

Featured Post

What is SQL Server and how does it work?

The purpose of this paper is to provide you background on SQL Server. It’s your self-study guide for learning fundamentals. It includes both the history of SQL and its technical basics. Concepts and definitions will form the solid foundation of your future DBA expertise.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article runs through the process of deploying a single EXE application selectively to a group of user.
Did you know that more than 4 billion data records have been recorded as lost or stolen since 2013? It was a staggering number brought to our attention during last week’s ManageEngine webinar, where attendees received a comprehensive look at the ma…
In this Micro Tutorial viewers will learn how to use Boot Corrector from Paragon Rescue Kit Free to identify and fix the boot problems of Windows 7/8/2012R2 etc. As an example is used Windows 2012R2 which lost its active partition flag (often happen…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…

752 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question