event log question

[TekChik]

does Windows 2000 record the time you log in and out of a machine? if so, where?

 

[MustISO]

You may have to turn security auditing on but Windows 2000 server can do this.

 

[stash]

Originally posted by: MustISO
You may have to turn security auditing on but Windows 2000 server can do this.

So can Windows 2000 Professional

 

[TekChik]

Originally posted by: STaSh

Originally posted by: MustISO
You may have to turn security auditing on but Windows 2000 server can do this.

So can Windows 2000 Professional

so i have it auditing events, but it's not recording the logOFFs, just logONs...

i thought i saw somewhere once that it was some kind of bug, but i cant find how to fix it now.

/whine

 

[MystiKal]

Check to see if you have Audit Account Logon Events set to audit successful and failure and make sure you are looking in the security log

 

[TekChik]

Originally posted by: MystiKal
Check to see if you have Audit Account Logon Events set to audit successful and failure and make sure you are looking in the security log

yes...i do...and i am...

but here's the thing - i saw it written somewhere that there is some kind of bug in Win2000 that prevents the audit from recording some logoffs. in my case it seems to be all of them. i wonder if there's a fix/patch/3rd party utility that will do it.