Win XP Pro & Win 2K Pro – Track Logins
Is is possible to obtain local user sign-on information? i.e. time / date / user name.
Also, what is the easiest way to create a login reports for future use.
Thank you
Software/Hardware used:
Software/Hardware used:
ASKED:
December 21, 2006 4:26 PM
UPDATED:
December 26, 2006 9:20 AM
Answer Wiki:
Here's a list of log entries that relate to user logons to local workstations: http://support.microsoft.com/kb/174073
You'd have to use a third party application to track user activity and run reports.
SF
To see all answers submitted to the Answer Wiki: View Answer History.
I’d recommend AdventNet’s ManageEngine Event Log Analyzer.
http://manageengine.adventnet.com/products/eventlog/download.html?professional
There are a number of competitors but this one is free for 5 hosts and about $500/yr for up to 25. If you point it to your DCs and just pull the security log, you can get all this info.
The reasons I like it: 1) No agents. 2) Can archive old events to .zip files and store them properly without taking up a large amount of space and import them back in to run scans against. 3) It uses a *real* database as MySQL rather than MS Access 4) It comes with many industry standard reports such as who logged on and when, etc, etc. 5) For complex reporting such as “who logged in, where did they go and what did they read/write/delete and did they open their mailbox?” you would need to fire up a MySQL database console and just use it to run SQL queries against the database to come back with what you want.
It’s a good and flexible product and quite cheap compared to its competitors, some of which are appliance based solutions.