asked on
log on and log off
I am trying to find user logon activity in the Active Directory. I thought I could look into the Security events on the domain controller, specifically Event ID 4624. However, it appears to list only the user's activities on the servers they have connections to. Is there a way to find out the user's logon time and logoff time
ASKER
There is a server named 'myserv,' and I want to know who has logged onto it. I am aware that only a few people are allowed to use that server. I would like to know who has logged in and the corresponding timestamps.
Generally, to track that, you need to have prepared to track that - meaning enabled auditing or created a logon script to that records logon activity. You can create the policy or script now, but it won't help you for the past.
For more information see:
ASKER
Thank you!
A similar question came up recently... can you elaborate on why you need this information? Perhaps there's another way to get what you're actually looking for or perhaps you're trying to do something for reasons that are ill-advised. Understanding what you're looking for can help get you the best possible answer.