windows 2000

[ppaik]

I'm trying to track users logged time on the DC, from the time they log in to the time they log out. I've tried changing audit policies, but that isn't working for me. Is there any way to easily track this? And can anyone recommend any software if windows 2000 doesn't provide this feature?

It will be used kind of like a time card for after hour employees.

Thanks in advance.

 

[ppaik]

ttt

 

[nweaver]

You could put something into a login script that would flag an event. not sure about the log off thing though

 

[bruceb]

See this link ... it explains how to set it up ... should do what you want it to:

http://www.microsoft.com/technet/prodte...000serv/maintain/monitor/logonoff.mspx

 

[ppaik]

Originally posted by: bruceb
See this link ... it explains how to set it up ... should do what you want it to:

http://www.microsoft.com/technet/prodte...000serv/maintain/monitor/logonoff.mspx

thanks for the link bruceb, but i did read this same article and could not produce the same outcome. The security logs seems to show on the workstations rather than the DC.

The problem with Audit logon events and Logon and Logoff is that Windows 2000 and NT record these events on the system on which the logon occurs. When a user logs on interactively at a workstation, Windows 2000 and NT record the logon event in the local workstation's Security log?if you've turned on audit policy at the workstation. When a user connects to a server over the network (e.g., by using a drive mapping), Windows 2000 and NT record the network logon on the server's Security log. As a result, logon and logoff activity events are scattered across every system in your network. Microsoft heard our complaints and added the Audit account logon events category, which tracks user authentication at centralized points: the DCs in your domain.

this sounds like it should show if I enable the audit policies on the DC, but it only seems to log on the workstations...

Also, these security logs dont show like a time logged in...I guess I would have to manually sort through each person's record, which would probably be easier to do on their workstation anyway.

I can't figure it out the way all those Libraries and PC Bangs do it.

 

[NogginBoink]

If you have multiple DC's, the event will only be logged on the DC that authenticated the logon from the client workstation.