RE: Server login reporting

2012-12-06 Thread James Hill
Instead of trying to use the event log use a scheduled task with the triggers at logon and on connection to user session to start a script. Here is a bit of powershell that I stole and it needs improving as it always gives the user name of the account that is set to run the scheduled task

RE: Server login reporting

2012-12-05 Thread Christopher Bodnar
@lyris.sunbelt-software.com Date: 12/04/2012 06:36 PM Subject:RE: Server login reporting This should help you out. http://technet.microsoft.com/en-us/library/cc787567(v=ws.10).aspx Thanks Webster -Original Message- From: Gavin Wilby [mailto:gavin.wi...@gmail.com] Subject: Re

Re: Server login reporting

2012-12-05 Thread Gavin Wilby
://www.guardianlife.com/ From:Webster webs...@carlwebster.com To:NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Date:12/04/2012 06:36 PM Subject:RE: Server login reporting -- This should help you out. http

Re: Server login reporting

2012-12-05 Thread Christopher Bodnar
christopher_bod...@glic.com The Guardian Life Insurance Company of America www.guardianlife.com From: Gavin Wilby gavin.wi...@gmail.com To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Date: 12/05/2012 09:08 AM Subject:Re: Server login reporting I

Re: Server login reporting

2012-12-04 Thread Rankin, James R
I would think a bit of event log parsing thru PowerShell or a command-line tool like dumpel combined with blat or some other tool might do the trick? ---Blackberried -Original Message- From: Gavin Wilby gavin.wi...@gmail.com Date: Tue, 4 Dec 2012 22:12:30 To: NT System Admin

RE: Server login reporting

2012-12-04 Thread Kim Longenbaugh
Or you could create a custom view in the event log reader, sorting for the events you're interested in, and use Attach Task To This Event... From: Rankin, James R [mailto:kz2...@googlemail.com] Sent: Tuesday, December 04, 2012 4:30 PM To: NT System Admin Issues Subject: Re: Server login

Re: Server login reporting

2012-12-04 Thread Rankin, James R
@lyris.sunbelt-software.comSubject: RE: Server login reporting Or you could create a custom view in the event log reader, sorting for the events you're interested in, and use Attach Task To This Event... From: Rankin, James R [mailto:kz2...@googlemail.com] Sent: Tuesday, December 04, 2012 4:30 PM To: NT

RE: Server login reporting

2012-12-04 Thread Kim Longenbaugh
Great minds. From: Joseph L. Casale [mailto:jcas...@activenetwerx.com] Sent: Tuesday, December 04, 2012 4:33 PM To: NT System Admin Issues Subject: RE: Server login reporting I know the sec log shows this, but its a nightmare to go through. Its really not, you can use the UI to actually

Re: Server login reporting

2012-12-04 Thread Gavin Wilby
….. From: Joseph L. Casale [mailto:jcas...@activenetwerx.com] Sent: Tuesday, December 04, 2012 4:33 PM To: NT System Admin Issues Subject: RE: Server login reporting I know the sec log shows this, but its a nightmare to go through. Its really not, you can use the UI to actually build a query

RE: Server login reporting

2012-12-04 Thread Webster
This should help you out. http://technet.microsoft.com/en-us/library/cc787567(v=ws.10).aspx Thanks Webster -Original Message- From: Gavin Wilby [mailto:gavin.wi...@gmail.com] Subject: Re: Server login reporting OK, I understand what your all saying but the server in question shows