RE: software to monitor users login and logoff
I second that - there are a lot of logon events that are not going to be logged on a DC - locking and unlocking the computer for example. In addition, the logon event from the DC does not tell you what computer they logged on to, plus there are a ton of different scenarios where authentication is required, resulting in a logon event being recorded on the DC. Grabbing the event logs from the computer(s) in question is the best way to know when a user actually logged on, imho. BTW, we had to do this last year for a HR issue involving an employee they did not think was performing their job. Event id 528 would be the login, but within that 528, login type 2 would be the console login, login type 7 would be unlocking the workstation, and login type 11 would be the cached interactive login where the user logs in with cached credentials and later authenticates to the DC. Thanks, James Winzenz Infrastructure Engineer - Security Pulte Homes Information Services -Original Message- From: Kurt Buff [mailto:[EMAIL PROTECTED] Posted At: Thursday, February 07, 2008 9:56 PM Posted To: NTSysadmin Conversation: software to monitor users login and logoff Subject: Re: software to monitor users login and logoff On 2/7/08, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: Remember that if you have multiple DC's that the last logon is registered on the DC they authenticated to and it doesn't replicate to other DC's. There are scripts out there that will poll all the DC's and give you that info but you have to put it together. That's why I said: Actually, you might want to put the Snare client on the workstations instead. That way you can capture logon events more directly. Of course, it means setting auditing for each of the workstations, but that's not terribly onerous, and the Snare client includes facilities for remote self-installation. Should be pretty painless, really. Kurt ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~ CONFIDENTIALITY NOTICE: This email may contain confidential and privileged material for the sole use of the intended recipient(s). Any review, use, distribution or disclosure by others is strictly prohibited. If you have received this communication in error, please notify the sender immediately by email and delete the message and any file attachments from your computer. Thank you. ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
RE: software to monitor users login and logoff
Sorry Kurt, didn't read past Thomas's signature. Although this tool does give quite a bit of logging in XML or CSV that you can pull from its primary focus is not what we were looking for. -Original Message- From: Kurt Buff [mailto:[EMAIL PROTECTED] Sent: Thursday, February 07, 2008 11:56 PM To: NT System Admin Issues Subject: Re: software to monitor users login and logoff On 2/7/08, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: Remember that if you have multiple DC's that the last logon is registered on the DC they authenticated to and it doesn't replicate to other DC's. There are scripts out there that will poll all the DC's and give you that info but you have to put it together. That's why I said: Actually, you might want to put the Snare client on the workstations instead. That way you can capture logon events more directly. Of course, it means setting auditing for each of the workstations, but that's not terribly onerous, and the Snare client includes facilities for remote self-installation. Should be pretty painless, really. Kurt ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
RE: software to monitor users login and logoff
Funny, I had a client ask the same thing yesterday. Must be an article somewhere they are reading. I haven't found anything eloquent quite yet. The problem I see is what if the person doesn't log off the computer? For this case it is to track a part-time employee's hours that may or may not be set hours. Art From: Thomas Gonzalez [mailto:[EMAIL PROTECTED] Sent: Thursday, February 07, 2008 3:36 PM To: NT System Admin Issues Subject: RE: software to monitor users login and logoff I have auditing set on the dc and can see that information. but the executive admin, wants the receptionist to see when user A logs in, (sort of spying you know, the backdoor person) then user A logs off at schedule time. I'm going to keep searching so when I find something in those lines, I'll post it back up joe. Thomas _ From: Joe Heaton [mailto:[EMAIL PROTECTED] Sent: Thursday, February 07, 2008 4:27 PM To: NT System Admin Issues Subject: RE: software to monitor users login and logoff I asked pretty much the same question a few days ago. The answer I got was to add a few lines to their login script, to send the date/time of logins to a .txt file wherever you want it. Joe Heaton _ From: Thomas Gonzalez [mailto:[EMAIL PROTECTED] Sent: Thursday, February 07, 2008 2:20 PM To: NT System Admin Issues Subject: OT: software to monitor users login and logoff Ok, so another question comes up, as if though I don't have other items on my plate. Has anyone used an application that would perform the following task: 1.User logs into network 2.One centralized workstation records and informs you when they login and logoff, with a GUI? I'm googling and see some cool stuff, but it's not what the CIO is requesting. I appreciate your responses. TIA, Thomas Gonzalez Technology Manager Girl Scouts of Southwest Texas 210.349.2404 phone 210.403.1586 DID 210.349.2666 fax www.girlscouts-swtx.org [EMAIL PROTECTED] ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
RE: software to monitor users login and logoff
That's exactly what they are tracking...our non-exempt employees. Especially the satellite office which has a combo of non and exempt staff. But for some reason, no one ever answers the phone over there :-) Thomas From: Art DeKneef [mailto:[EMAIL PROTECTED] Sent: Thursday, February 07, 2008 4:50 PM To: NT System Admin Issues Subject: RE: software to monitor users login and logoff Funny, I had a client ask the same thing yesterday. Must be an article somewhere they are reading. I haven't found anything eloquent quite yet. The problem I see is what if the person doesn't log off the computer? For this case it is to track a part-time employee's hours that may or may not be set hours. Art From: Thomas Gonzalez [mailto:[EMAIL PROTECTED] Sent: Thursday, February 07, 2008 3:36 PM To: NT System Admin Issues Subject: RE: software to monitor users login and logoff I have auditing set on the dc and can see that information. but the executive admin, wants the receptionist to see when user A logs in, (sort of spying you know, the backdoor person) then user A logs off at schedule time. I'm going to keep searching so when I find something in those lines, I'll post it back up joe. Thomas From: Joe Heaton [mailto:[EMAIL PROTECTED] Sent: Thursday, February 07, 2008 4:27 PM To: NT System Admin Issues Subject: RE: software to monitor users login and logoff I asked pretty much the same question a few days ago. The answer I got was to add a few lines to their login script, to send the date/time of logins to a .txt file wherever you want it. Joe Heaton From: Thomas Gonzalez [mailto:[EMAIL PROTECTED] Sent: Thursday, February 07, 2008 2:20 PM To: NT System Admin Issues Subject: OT: software to monitor users login and logoff Ok, so another question comes up, as if though I don't have other items on my plate. Has anyone used an application that would perform the following task: 1.User logs into network 2.One centralized workstation records and informs you when they login and logoff, with a GUI? I'm googling and see some cool stuff, but it's not what the CIO is requesting. I appreciate your responses. TIA, Thomas Gonzalez Technology Manager Girl Scouts of Southwest Texas 210.349.2404 phone 210.403.1586 DID 210.349.2666 fax www.girlscouts-swtx.org [EMAIL PROTECTED] ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
RE: software to monitor users login and logoff
Can you modify the logon script to send a pop-up message to the receptionist using the Net Send command? Does the user actually log off or simply lock the screen and walk away? Roger Wright Network Administrator Evatone, Inc. 727.572.7076 x388 To write with a broken pencil is pointless. From: Thomas Gonzalez [mailto:[EMAIL PROTECTED] Sent: Thursday, February 07, 2008 5:36 PM To: NT System Admin Issues Subject: RE: software to monitor users login and logoff I have auditing set on the dc and can see that information. but the executive admin, wants the receptionist to see when user A logs in, (sort of spying you know, the backdoor person) then user A logs off at schedule time. I'm going to keep searching so when I find something in those lines, I'll post it back up joe. Thomas _ From: Joe Heaton [mailto:[EMAIL PROTECTED] Sent: Thursday, February 07, 2008 4:27 PM To: NT System Admin Issues Subject: RE: software to monitor users login and logoff I asked pretty much the same question a few days ago. The answer I got was to add a few lines to their login script, to send the date/time of logins to a .txt file wherever you want it. Joe Heaton _ From: Thomas Gonzalez [mailto:[EMAIL PROTECTED] Sent: Thursday, February 07, 2008 2:20 PM To: NT System Admin Issues Subject: OT: software to monitor users login and logoff Ok, so another question comes up, as if though I don't have other items on my plate. Has anyone used an application that would perform the following task: 1.User logs into network 2.One centralized workstation records and informs you when they login and logoff, with a GUI? I'm googling and see some cool stuff, but it's not what the CIO is requesting. I appreciate your responses. TIA, Thomas Gonzalez Technology Manager Girl Scouts of Southwest Texas 210.349.2404 phone 210.403.1586 DID 210.349.2666 fax HYPERLINK http://www.girlscouts-swtx.orgwww.girlscouts-swtx.org HYPERLINK mailto:[EMAIL PROTECTED][EMAIL PROTECTED] ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
RE: software to monitor users login and logoff
Check out poweradmin it is free to monitor the event viewer. You can setup audit and power admin will even email when someone logs in or out. We use for monitoring off-hours access via term serv. /Chad lt-software.com, Thomas Gonzalez [EMAIL PROTECTED] wrote: I have auditing set on the dc and can see that information. but the executive admin, wants the receptionist to see when user A logs in, (sort of spying you know, the backdoor person) then user A logs off at schedule time. I'm going to keep searching so when I find something in those lines, I'll post it back up joe. Thomas From: Joe Heaton [mailto:[EMAIL PROTECTED] Sent: Thursday, February 07, 2008 4:27 PM To: NT System Admin Issues Subject: RE: software to monitor users login and logoff I asked pretty much the same question a few days ago. The answer I got was to add a few lines to their login script, to send the date/time of logins to a .txt file wherever you want it. Joe Heaton From: Thomas Gonzalez [mailto:[EMAIL PROTECTED] Sent: Thursday, February 07, 2008 2:20 PM To: NT System Admin Issues Subject: OT: software to monitor users login and logoff Ok, so another question comes up, as if though I don't have other items on my plate. Has anyone used an application that would perform the following task: 1.User logs into network 2.One centralized workstation records and informs you when they login and logoff, with a GUI? I'm googling and see some cool stuff, but it's not what the CIO is requesting. I appreciate your responses. TIA, Thomas Gonzalez Technology Manager Girl Scouts of Southwest Texas 210.349.2404 phone 210.403.1586 DID 210.349.2666 fax www.girlscouts-swtx.org [EMAIL PROTECTED] ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~ `รง(* CONFIDENTIALITY NOTE: The information contained in this transmission is privileged and confidential information intended only for the use of the individual or entity named above. If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this transmission in error, do not read it. Please immediately reply to the sender that you have received this communication in error and then delete it. Thank you. ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
RE: software to monitor users login and logoff
Maybe they just don't wanna talk to you... Joe Heaton From: Thomas Gonzalez [mailto:[EMAIL PROTECTED] Sent: Thursday, February 07, 2008 2:54 PM To: NT System Admin Issues Subject: RE: software to monitor users login and logoff That's exactly what they are tracking...our non-exempt employees. Especially the satellite office which has a combo of non and exempt staff. But for some reason, no one ever answers the phone over there :-) Thomas From: Art DeKneef [mailto:[EMAIL PROTECTED] Sent: Thursday, February 07, 2008 4:50 PM To: NT System Admin Issues Subject: RE: software to monitor users login and logoff Funny, I had a client ask the same thing yesterday. Must be an article somewhere they are reading. I haven't found anything eloquent quite yet. The problem I see is what if the person doesn't log off the computer? For this case it is to track a part-time employee's hours that may or may not be set hours. Art From: Thomas Gonzalez [mailto:[EMAIL PROTECTED] Sent: Thursday, February 07, 2008 3:36 PM To: NT System Admin Issues Subject: RE: software to monitor users login and logoff I have auditing set on the dc and can see that information. but the executive admin, wants the receptionist to see when user A logs in, (sort of spying you know, the backdoor person) then user A logs off at schedule time. I'm going to keep searching so when I find something in those lines, I'll post it back up joe. Thomas From: Joe Heaton [mailto:[EMAIL PROTECTED] Sent: Thursday, February 07, 2008 4:27 PM To: NT System Admin Issues Subject: RE: software to monitor users login and logoff I asked pretty much the same question a few days ago. The answer I got was to add a few lines to their login script, to send the date/time of logins to a .txt file wherever you want it. Joe Heaton From: Thomas Gonzalez [mailto:[EMAIL PROTECTED] Sent: Thursday, February 07, 2008 2:20 PM To: NT System Admin Issues Subject: OT: software to monitor users login and logoff Ok, so another question comes up, as if though I don't have other items on my plate. Has anyone used an application that would perform the following task: 1.User logs into network 2.One centralized workstation records and informs you when they login and logoff, with a GUI? I'm googling and see some cool stuff, but it's not what the CIO is requesting. I appreciate your responses. TIA, Thomas Gonzalez Technology Manager Girl Scouts of Southwest Texas 210.349.2404 phone 210.403.1586 DID 210.349.2666 fax www.girlscouts-swtx.org [EMAIL PROTECTED] ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
RE: software to monitor users login and logoff
Umdid you know most decent IM software can perform this function? Also a search for In/out board software find things that can do this as well. My $0.02 Dave Lum - Systems Engineer [EMAIL PROTECTED] - (971)-222-1025 When you step on the brakes your life is in your foot's hands From: Art DeKneef [mailto:[EMAIL PROTECTED] Sent: Thursday, February 07, 2008 2:50 PM To: NT System Admin Issues Subject: RE: software to monitor users login and logoff Funny, I had a client ask the same thing yesterday. Must be an article somewhere they are reading. I haven't found anything eloquent quite yet. The problem I see is what if the person doesn't log off the computer? For this case it is to track a part-time employee's hours that may or may not be set hours. Art From: Thomas Gonzalez [mailto:[EMAIL PROTECTED] Sent: Thursday, February 07, 2008 3:36 PM To: NT System Admin Issues Subject: RE: software to monitor users login and logoff I have auditing set on the dc and can see that information. but the executive admin, wants the receptionist to see when user A logs in, (sort of spying you know, the backdoor person) then user A logs off at schedule time. I'm going to keep searching so when I find something in those lines, I'll post it back up joe. Thomas From: Joe Heaton [mailto:[EMAIL PROTECTED] Sent: Thursday, February 07, 2008 4:27 PM To: NT System Admin Issues Subject: RE: software to monitor users login and logoff I asked pretty much the same question a few days ago. The answer I got was to add a few lines to their login script, to send the date/time of logins to a .txt file wherever you want it. Joe Heaton From: Thomas Gonzalez [mailto:[EMAIL PROTECTED] Sent: Thursday, February 07, 2008 2:20 PM To: NT System Admin Issues Subject: OT: software to monitor users login and logoff Ok, so another question comes up, as if though I don't have other items on my plate. Has anyone used an application that would perform the following task: 1.User logs into network 2.One centralized workstation records and informs you when they login and logoff, with a GUI? I'm googling and see some cool stuff, but it's not what the CIO is requesting. I appreciate your responses. TIA, Thomas Gonzalez Technology Manager Girl Scouts of Southwest Texas 210.349.2404 phone 210.403.1586 DID 210.349.2666 fax www.girlscouts-swtx.org [EMAIL PROTECTED] ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
RE: software to monitor users login and logoff
LMAO :-) From: Joe Heaton [mailto:[EMAIL PROTECTED] Sent: Thursday, February 07, 2008 5:07 PM To: NT System Admin Issues Subject: RE: software to monitor users login and logoff Maybe they just don't wanna talk to you... Joe Heaton From: Thomas Gonzalez [mailto:[EMAIL PROTECTED] Sent: Thursday, February 07, 2008 2:54 PM To: NT System Admin Issues Subject: RE: software to monitor users login and logoff That's exactly what they are tracking...our non-exempt employees. Especially the satellite office which has a combo of non and exempt staff. But for some reason, no one ever answers the phone over there :-) Thomas From: Art DeKneef [mailto:[EMAIL PROTECTED] Sent: Thursday, February 07, 2008 4:50 PM To: NT System Admin Issues Subject: RE: software to monitor users login and logoff Funny, I had a client ask the same thing yesterday. Must be an article somewhere they are reading. I haven't found anything eloquent quite yet. The problem I see is what if the person doesn't log off the computer? For this case it is to track a part-time employee's hours that may or may not be set hours. Art From: Thomas Gonzalez [mailto:[EMAIL PROTECTED] Sent: Thursday, February 07, 2008 3:36 PM To: NT System Admin Issues Subject: RE: software to monitor users login and logoff I have auditing set on the dc and can see that information. but the executive admin, wants the receptionist to see when user A logs in, (sort of spying you know, the backdoor person) then user A logs off at schedule time. I'm going to keep searching so when I find something in those lines, I'll post it back up joe. Thomas From: Joe Heaton [mailto:[EMAIL PROTECTED] Sent: Thursday, February 07, 2008 4:27 PM To: NT System Admin Issues Subject: RE: software to monitor users login and logoff I asked pretty much the same question a few days ago. The answer I got was to add a few lines to their login script, to send the date/time of logins to a .txt file wherever you want it. Joe Heaton From: Thomas Gonzalez [mailto:[EMAIL PROTECTED] Sent: Thursday, February 07, 2008 2:20 PM To: NT System Admin Issues Subject: OT: software to monitor users login and logoff Ok, so another question comes up, as if though I don't have other items on my plate. Has anyone used an application that would perform the following task: 1.User logs into network 2.One centralized workstation records and informs you when they login and logoff, with a GUI? I'm googling and see some cool stuff, but it's not what the CIO is requesting. I appreciate your responses. TIA, Thomas Gonzalez Technology Manager Girl Scouts of Southwest Texas 210.349.2404 phone 210.403.1586 DID 210.349.2666 fax www.girlscouts-swtx.org [EMAIL PROTECTED] ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
RE: software to monitor users login and logoff
I asked pretty much the same question a few days ago. The answer I got was to add a few lines to their login script, to send the date/time of logins to a .txt file wherever you want it. Joe Heaton From: Thomas Gonzalez [mailto:[EMAIL PROTECTED] Sent: Thursday, February 07, 2008 2:20 PM To: NT System Admin Issues Subject: OT: software to monitor users login and logoff Ok, so another question comes up, as if though I don't have other items on my plate. Has anyone used an application that would perform the following task: 1.User logs into network 2.One centralized workstation records and informs you when they login and logoff, with a GUI? I'm googling and see some cool stuff, but it's not what the CIO is requesting. I appreciate your responses. TIA, Thomas Gonzalez Technology Manager Girl Scouts of Southwest Texas 210.349.2404 phone 210.403.1586 DID 210.349.2666 fax www.girlscouts-swtx.org [EMAIL PROTECTED] ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
RE: software to monitor users login and logoff
I have auditing set on the dc and can see that information. but the executive admin, wants the receptionist to see when user A logs in, (sort of spying you know, the backdoor person) then user A logs off at schedule time. I'm going to keep searching so when I find something in those lines, I'll post it back up joe. Thomas From: Joe Heaton [mailto:[EMAIL PROTECTED] Sent: Thursday, February 07, 2008 4:27 PM To: NT System Admin Issues Subject: RE: software to monitor users login and logoff I asked pretty much the same question a few days ago. The answer I got was to add a few lines to their login script, to send the date/time of logins to a .txt file wherever you want it. Joe Heaton From: Thomas Gonzalez [mailto:[EMAIL PROTECTED] Sent: Thursday, February 07, 2008 2:20 PM To: NT System Admin Issues Subject: OT: software to monitor users login and logoff Ok, so another question comes up, as if though I don't have other items on my plate. Has anyone used an application that would perform the following task: 1.User logs into network 2.One centralized workstation records and informs you when they login and logoff, with a GUI? I'm googling and see some cool stuff, but it's not what the CIO is requesting. I appreciate your responses. TIA, Thomas Gonzalez Technology Manager Girl Scouts of Southwest Texas 210.349.2404 phone 210.403.1586 DID 210.349.2666 fax www.girlscouts-swtx.org [EMAIL PROTECTED] ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
RE: software to monitor users login and logoff
We use Out'n About! for the in/out stuff, but it requires the users to actually check themselves out, so probably won't work for your instance. Joe Heaton From: David Lum [mailto:[EMAIL PROTECTED] Sent: Thursday, February 07, 2008 3:10 PM To: NT System Admin Issues Subject: RE: software to monitor users login and logoff Umdid you know most decent IM software can perform this function? Also a search for In/out board software find things that can do this as well. My $0.02 Dave Lum - Systems Engineer [EMAIL PROTECTED] - (971)-222-1025 When you step on the brakes your life is in your foot's hands From: Art DeKneef [mailto:[EMAIL PROTECTED] Sent: Thursday, February 07, 2008 2:50 PM To: NT System Admin Issues Subject: RE: software to monitor users login and logoff Funny, I had a client ask the same thing yesterday. Must be an article somewhere they are reading. I haven't found anything eloquent quite yet. The problem I see is what if the person doesn't log off the computer? For this case it is to track a part-time employee's hours that may or may not be set hours. Art From: Thomas Gonzalez [mailto:[EMAIL PROTECTED] Sent: Thursday, February 07, 2008 3:36 PM To: NT System Admin Issues Subject: RE: software to monitor users login and logoff I have auditing set on the dc and can see that information. but the executive admin, wants the receptionist to see when user A logs in, (sort of spying you know, the backdoor person) then user A logs off at schedule time. I'm going to keep searching so when I find something in those lines, I'll post it back up joe. Thomas From: Joe Heaton [mailto:[EMAIL PROTECTED] Sent: Thursday, February 07, 2008 4:27 PM To: NT System Admin Issues Subject: RE: software to monitor users login and logoff I asked pretty much the same question a few days ago. The answer I got was to add a few lines to their login script, to send the date/time of logins to a .txt file wherever you want it. Joe Heaton From: Thomas Gonzalez [mailto:[EMAIL PROTECTED] Sent: Thursday, February 07, 2008 2:20 PM To: NT System Admin Issues Subject: OT: software to monitor users login and logoff Ok, so another question comes up, as if though I don't have other items on my plate. Has anyone used an application that would perform the following task: 1.User logs into network 2.One centralized workstation records and informs you when they login and logoff, with a GUI? I'm googling and see some cool stuff, but it's not what the CIO is requesting. I appreciate your responses. TIA, Thomas Gonzalez Technology Manager Girl Scouts of Southwest Texas 210.349.2404 phone 210.403.1586 DID 210.349.2666 fax www.girlscouts-swtx.org [EMAIL PROTECTED] ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
Re: software to monitor users login and logoff
On Feb 7, 2008 2:36 PM, Thomas Gonzalez [EMAIL PROTECTED] wrote: I have auditing set on the dc and can see that information. but the executive admin, wants the receptionist to see when user A logs in, (sort of spying you know, the backdoor person) then user A logs off at schedule time. I'm going to keep searching so when I find something in those lines, I'll post it back up joe. Thomas I'll bet that a good syslog server could do this. Install the Snare client (http://www.intersectalliance.com/snare) on your DCs, have them send stuff to a syslog server (http://www.kiwisyslog.com) which will watch for events and can be set up to execute scripts on detection of your set of events. Actually, you might want to put the Snare client on the workstations instead. Kurt ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
Re: software to monitor users login and logoff
On 2/7/08, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: Remember that if you have multiple DC's that the last logon is registered on the DC they authenticated to and it doesn't replicate to other DC's. There are scripts out there that will poll all the DC's and give you that info but you have to put it together. That's why I said: Actually, you might want to put the Snare client on the workstations instead. That way you can capture logon events more directly. Of course, it means setting auditing for each of the workstations, but that's not terribly onerous, and the Snare client includes facilities for remote self-installation. Should be pretty painless, really. Kurt ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
