Instead of trying to use the event log use a scheduled task with the
triggers at logon and on connection to user session to start a script.
Here is a bit of powershell that I stole and it needs improving as it always
gives the user name of the account that is set to run the scheduled task
@lyris.sunbelt-software.com
Date: 12/04/2012 06:36 PM
Subject:RE: Server login reporting
This should help you out.
http://technet.microsoft.com/en-us/library/cc787567(v=ws.10).aspx
Thanks
Webster
-Original Message-
From: Gavin Wilby [mailto:gavin.wi...@gmail.com]
Subject: Re
://www.guardianlife.com/
From:Webster webs...@carlwebster.com
To:NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com
Date:12/04/2012 06:36 PM
Subject:RE: Server login reporting
--
This should help you out.
http
christopher_bod...@glic.com
The Guardian Life Insurance Company of America
www.guardianlife.com
From: Gavin Wilby gavin.wi...@gmail.com
To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com
Date: 12/05/2012 09:08 AM
Subject:Re: Server login reporting
I
I would think a bit of event log parsing thru PowerShell or a command-line tool
like dumpel combined with blat or some other tool might do the trick?
---Blackberried
-Original Message-
From: Gavin Wilby gavin.wi...@gmail.com
Date: Tue, 4 Dec 2012 22:12:30
To: NT System Admin
Or you could create a custom view in the event log reader, sorting for the
events you're interested in, and use Attach Task To This Event...
From: Rankin, James R [mailto:kz2...@googlemail.com]
Sent: Tuesday, December 04, 2012 4:30 PM
To: NT System Admin Issues
Subject: Re: Server login
@lyris.sunbelt-software.comSubject: RE: Server login reporting
Or you could create a custom view in the event log reader, sorting for the
events you're interested in, and use Attach Task To This Event...
From: Rankin, James R [mailto:kz2...@googlemail.com]
Sent: Tuesday, December 04, 2012 4:30 PM
To: NT
Great minds.
From: Joseph L. Casale [mailto:jcas...@activenetwerx.com]
Sent: Tuesday, December 04, 2012 4:33 PM
To: NT System Admin Issues
Subject: RE: Server login reporting
I know the sec log shows this, but its a nightmare to go through.
Its really not, you can use the UI to actually
…..
From: Joseph L. Casale [mailto:jcas...@activenetwerx.com]
Sent: Tuesday, December 04, 2012 4:33 PM
To: NT System Admin Issues
Subject: RE: Server login reporting
I know the sec log shows this, but its a nightmare to go through.
Its really not, you can use the UI to actually build a query
This should help you out.
http://technet.microsoft.com/en-us/library/cc787567(v=ws.10).aspx
Thanks
Webster
-Original Message-
From: Gavin Wilby [mailto:gavin.wi...@gmail.com]
Subject: Re: Server login reporting
OK,
I understand what your all saying but the server in question shows
10 matches
Mail list logo