--- In ITCENTER@yahoogroups.com, "Yanu Triana Putra" <[EMAIL PROTECTED]> wrote: > > built in nya gak bisa !! harus pake AD !! > > regards > Yanu > > > -----Original Message----- > From: ITCENTER@yahoogroups.com [mailto:[EMAIL PROTECTED] On Behalf > Of Yudhistira Arindra > Sent: Friday, October 27, 2006 10:17 PM > To: ITCENTER@yahoogroups.com > Subject: [ITCENTER] timestamp logging di WinXP > > > > Sebelumnya ma'af kalau pertanyaan saya kurang relevan, sudah pernah dibahas > atau mengganggu. > Saya ingin menempatkan 1 PC Pentium IV di rumah kos untuk dipakai bergantian > > anak-anak kos dengan masing2 punya user-account atau login ID. Sistem > operasi PCnya WinXP dengan HDD NTFS. Bagaimana memonitor penggunaannya? > Apakah bisa saya dapatkan log dari time stamp kapan si A log-in dan log-off? > > Apakah untuk itu perlu software tambahan atau cukup fasilitas native WinXP? > Mohon pencerahannya. Terima kasih. > > wassalam > Arindra Yudhistira
Saya sudah coba pakai Local Security Policy tanpa domain (tapi untuk Windows2000 Pro), dan memang Logon tercatat, tapi Logoff tidak (mungkin bug Windows2000 [1]), coba saja sendiri nyalakan Auditing untuk "Audit Logon Events" dan lihat di security log. [1]: (dari http://www.microsoft.com/technet/prodtechnol/windows2000serv/maintain/monitor/logevnts.mspx) To link a successful logon event (i.e., event ID 528 or event ID 540) to its corresponding logoff event (Windows 2000 records successful logoffs with event ID 538, just as NT does), use the Logon ID number that appears in both events. For example, suppose you see a logon event for Administrator at 1:27 p.m., and you want to know when Administrator logged off. Note the Logon ID in event ID 528 (e.g., 0x0, 0xEC87 in Figure 4), then right-click the Security log in Event Viewer and click View/Find to search the event log for that number. I have a bit of bad news, though. Windows 2000 suffers from the same strange bug that NT suffers from: The OS occasionally neglects to log event ID 538. (So far, in Windows 2000, I've noticed this problem only for interactive logons.) In other words, you might see an event ID 528 that doesn't have a corresponding event ID 538. -- www.itcenter.or.id - Komunitas Teknologi Informasi Indonesia Gabung, Keluar, Mode Kirim : [EMAIL PROTECTED] ## Jobs: itcenter.or.id/jobs ## Bursa: itcenter.or.id/bursa ## ## Jaket ITCENTER tersedia di http://shop.itcenter.or.id Yahoo! Groups Links <*> To visit your group on the web, go to: http://groups.yahoo.com/group/ITCENTER/ <*> Your email settings: Individual Email | Traditional <*> To change settings online go to: http://groups.yahoo.com/group/ITCENTER/join (Yahoo! ID required) <*> To change settings via email: mailto:[EMAIL PROTECTED] mailto:[EMAIL PROTECTED] <*> To unsubscribe from this group, send an email to: [EMAIL PROTECTED] <*> Your use of Yahoo! Groups is subject to: http://docs.yahoo.com/info/terms/
