Is there a way to retrieve computer name and who logged in active directory in windows server 2012

Is there way to retrieve such information.
LVL 1
akosinoahAsked:
Who is Participating?

[Webinar] Streamline your web hosting managementRegister Today

x
 
Mal OsborneConnect With a Mentor Alpha GeekCommented:
It is POSSIBLE, but awful difficult to get this data by parsing security logs on all DCs.

A better way is to set up scripts, push them out via group policy, and have them create text files with the data as you would like it. Pretty simple to set up, and works well. Just add the scripts as user login & logout scripts into a GPO and apply it.

Log In %Date% %TIME% %USERNAME% >> \\servername\Logs\Computer\%COMPUTERNAME%.log

Open in new window

Will give you a text file for each machine, with a line for each user logging in. (or out)

Log In %Date% %TIME% %COMPUTERNAME% >> \\servername\Logs\User\%USERNAME%.log

Open in new window

Will give you a text file for each user, with machines they logged into.
0
 
Pune TechCommented:
You need to first enable logon auditing to have Windows track which user accounts log in and when.

The Audit logon events setting tracks both local logins and network logins. Each logon event specifies the user account that logged on and the time the login took place. You can also see when users logged off.

http://www.howtogeek.com/124313/how-to-see-who-logged-into-a-computer-and-when/
1
 
yo_beeDirector of ITCommented:
Are you looking to see who access AD and did changes?
Here is a link to a publish how to from MS

https://technet.microsoft.com/en-us/library/cc731607(v=ws.10).aspx
0
 
Mal OsborneAlpha GeekCommented:
Here is a big discussion about using login scripts for that purpose:

http://blogs.msmvps.com/kwsupport/2005/02/24/lazy-mans-way-to-track-user-logonlogoff/
0
 
akosinoahAuthor Commented:
thank you
0
All Courses

From novice to tech pro — start learning today.