How to log users log-on-off time

On Mar 11, 8:24 am, "Miha" <miha.ber... RemoveThis @email.si> wrote:
> Hi
>
> Is it possible in Win2003 domain environment to get infromations when users
> log-on and log-off into their computers?
> My boss wants that when a user log-on and log-off into his computers, he
> automatically gets an e-mail with the following data:
> - user that has logged on/off
> - the time of log-on/off
> Can this be arranged via GPO or do we need custom VBS script? If so, does
> anyone have it allready?
> Thank you all in advance.
> Regards,
> Miha

Sounds like you'll wanna tweak the login and logout scripts.
For the info itself, look at some of system tools as www.systinternals.com
such as psloggedon

Great, thank you all for help!
Regards,Miha
"Corey Thomas - MCSE/MCSA/MCDBA"
<CoreyThomasMCSEMCSAMCDBA RemoveThis @discussions.microsoft.com> wrote in message
news:CC2352D6-9728-468E-B365-F04446B90ECE@microsoft.com...
> You can write two scripts to send emails. One for log on and one for log
> off. Then you can add these to a GPO and apply it to your users.
>
> Here is some sample code on using CDO to email within a script:
>
> http://www.microsoft.com/technet/scriptcenter/scripts/default.mspx?mfr=true
>
>
> -Corey
>
>
>
> "Miha" wrote:
>
>> Hi
>>
>> Is it possible in Win2003 domain environment to get infromations when
>> users
>> log-on and log-off into their computers?
>> My boss wants that when a user log-on and log-off into his computers, he
>> automatically gets an e-mail with the following data:
>> - user that has logged on/off
>> - the time of log-on/off
>> Can this be arranged via GPO or do we need custom VBS script? If so, does
>> anyone have it allready?
>> Thank you all in advance.
>> Regards,
>> Miha
>>

Maybe it would be better when you configure your logon and logoff script to
add a line with the desired data (username, time of logon/logoff,
domain,action, ect ect) to a file on a server share and name the file after
the computer.

For instance you create a (hidden?)share and let every script report to a
file in that share.

You'd have something like this:

\\MyServer\PClogs$\%computername%.txt

Your boss will have a complete listing of all used computers, the frequency
of use and which user logs on to that computer.
This is a much easier way of checking and archiving this kind of data.

Just my 2 cents.

Albert.




"Miha" <miha.bernik RemoveThis @email.si> wrote in message
news:ACFD3783-48C7-4958-99FD-0B391326AC48@microsoft.com...
> Hi
>
> Is it possible in Win2003 domain environment to get infromations when
> users log-on and log-off into their computers?
> My boss wants that when a user log-on and log-off into his computers, he
> automatically gets an e-mail with the following data:
> - user that has logged on/off
> - the time of log-on/off
> Can this be arranged via GPO or do we need custom VBS script? If so, does
> anyone have it allready?
> Thank you all in advance.
> Regards,
> Miha

That's what we do. We log the user name, date, time, and computer name back
to a file on a server share. Each file is named by the user's login. Each
time the script runs, it opens the file and appends the info so we can keep a
running record.

I'm trying to get upper management to invest in a SQL server so we can save
the info there for better SOX compliance and more robust features.


-Corey


"Albert Kikkert" wrote:

> Maybe it would be better when you configure your logon and logoff script to
> add a line with the desired data (username, time of logon/logoff,
> domain,action, ect ect) to a file on a server share and name the file after
> the computer.
>
> For instance you create a (hidden?)share and let every script report to a
> file in that share.
>
> You'd have something like this:
>
> \\MyServer\PClogs$\%computername%.txt
>
> Your boss will have a complete listing of all used computers, the frequency
> of use and which user logs on to that computer.
> This is a much easier way of checking and archiving this kind of data.
>
> Just my 2 cents.
>
> Albert.
>
>
>
>
> "Miha" <miha.bernik DeleteThis @email.si> wrote in message
> news:ACFD3783-48C7-4958-99FD-0B391326AC48@microsoft.com...
> > Hi
> >
> > Is it possible in Win2003 domain environment to get infromations when
> > users log-on and log-off into their computers?
> > My boss wants that when a user log-on and log-off into his computers, he
> > automatically gets an e-mail with the following data:
> > - user that has logged on/off
> > - the time of log-on/off
> > Can this be arranged via GPO or do we need custom VBS script? If so, does
> > anyone have it allready?
> > Thank you all in advance.
> > Regards,
> > Miha
>
>
>

Corey Thomas - MCSE/MCSA/MCDBA wrote:
> That's what we do. We log the user name, date, time, and computer name back
> to a file on a server share. Each file is named by the user's login. Each
> time the script runs, it opens the file and appends the info so we can keep a
> running record.
>
> I'm trying to get upper management to invest in a SQL server so we can save
> the info there for better SOX compliance and more robust features.
>
>
> -Corey
>
>
> "Albert Kikkert" wrote:
>
>> Maybe it would be better when you configure your logon and logoff script to
>> add a line with the desired data (username, time of logon/logoff,
>> domain,action, ect ect) to a file on a server share and name the file after
>> the computer.
>>
>> For instance you create a (hidden?)share and let every script report to a
>> file in that share.
>>
>> You'd have something like this:
>>
>> \\MyServer\PClogs$\%computername%.txt
>>
>> Your boss will have a complete listing of all used computers, the frequency
>> of use and which user logs on to that computer.
>> This is a much easier way of checking and archiving this kind of data.
>>
>> Just my 2 cents.
>>
>> Albert.
>>
>>
>>
>>
>> "Miha" <miha.bernik.DeleteThis@email.si> wrote in message
>> news:ACFD3783-48C7-4958-99FD-0B391326AC48@microsoft.com...
>>> Hi
>>>
>>> Is it possible in Win2003 domain environment to get infromations when
>>> users log-on and log-off into their computers?
>>> My boss wants that when a user log-on and log-off into his computers, he
>>> automatically gets an e-mail with the following data:
>>> - user that has logged on/off
>>> - the time of log-on/off
>>> Can this be arranged via GPO or do we need custom VBS script? If so, does
>>> anyone have it allready?
>>> Thank you all in advance.
>>> Regards,
>>> Miha
>>
>>

What's wrong with Auditing the logons on the domain controller? Simply
define the domain GPO to audit user logon. It won't be sending any mail
though.

"Paul Weterings" <Paul DeleteThis @syncpuls.com> wrote in message
news:47d71040$0$13879$e4fe514c@dreader17.news.xs4all.nl...
>
> What's wrong with Auditing the logons on the domain controller? Simply
> define the domain GPO to audit user logon. It won't be sending any mail
> though.

1) the boss doesn't get email
2) the boss needs administrative priviliges
3) the security log will have no history unless you make it very very big.
4) there is a lot of overkill in the information. The boss most probably
doesn't know jack from reading sec. logs.