how to see who as last logged on to a server

[ds215588]

Hi,

I am running a w2k domain with a couple of servers and workstations.
Can anybody tell me how I can check who has last logged on the a
specific server or workstation?

what security events must i check?
are there other ways except of the security event log?

Thanks, Dan

 

[ptwilliams]

The security logs will have network logons as well as interactive logons, so
it'll be a painstaking process to ascertain who and when in this manner.
You can script this of course. However, in a small environment (which
you've hinted you have) you could always enable DisplayLastLogonName, which
would remember the last logon at the winlogon dialog (on a per-machine
basis) ;-)

--

Paul Williams

http://www.msresource.net
http://forums.msresource.net


Hi,

I am running a w2k domain with a couple of servers and workstations.
Can anybody tell me how I can check who has last logged on the a
specific server or workstation?

what security events must i check?
are there other ways except of the security event log?

Thanks, Dan

 

[Snoopy]

I implemented a script(someone else wrote it) that will keep a log of each
users login/out in a separate text file for each user.
The text that is created looks like this: smithb.txt
Login,smithb,Bob Smith,2005/01/18,09:10:13,computer 1, 200.200.200.1,\\DC-1
Logoff,smithb,Bob Smith,2005/01/18,11:21:41,computer 1, 200.200.200.1,\\DC-1

I use Kixtart for the script which is executed from a GPO.