Tracking login's

[John N.]

I manage a medical office, and due to the new HIPAA
regulations, we are needing to find a way to track what
users have logged onto a workstation. For example, I
might want to find out who was loggon on (and the time,
length, etc.) to a workstation for the past week.

Is there a log that is already in existence, or, are there
some settings I can change to create a log from now on?

Also, we are on a network, and it would be nice (if
possible) to access all logs from the server.

Thanks for any input you can give.
..

 

[Michael Bednarek]

I manage a medical office, and due to the new HIPAA
regulations, we are needing to find a way to track what
users have logged onto a workstation. For example, I
might want to find out who was loggon on (and the time,
length, etc.) to a workstation for the past week.

Is there a log that is already in existence, or, are there
some settings I can change to create a log from now on?

Also, we are on a network, and it would be nice (if
possible) to access all logs from the server.

This is part of our users' logon script in KiXtart:
(your news reader may wrap some of the following lines)
; Create an empty file in the hidden share \\logonserver\LOGONS$ of the form
; <user>YYYYMMDDHHMMSSN.<computername>
$sNow = Substr(@DATE,1,4)+Substr(@DATE,6,2)+Substr(@Date,9,2)+Substr(@Time,1,2)+Substr(@TIME,4,2)+Substr(@TIME,7,2)
IF Open(3, "\\logonserver\LOGONS$\" + @USERID + $sNow + "N." + @WKSTA, 5) = 0
$RC = Close(3)
EndIf

and its counterpart in the users' logoff script:
$sNow = Substr(@DATE,1,4)+Substr(@DATE,6,2)+Substr(@Date,9,2)+Substr(@Time,1,2)+Substr(@TIME,4,2)+Substr(@TIME,7,2)
IF Open(3, "\\logonserver\LOGONS$\" + @USERID + $sNow + "F." + @WKSTA, 5) = 0
$RC = Close(3)
EndIf

This will merely create filenames where the information of
user, time and workstation makes up the filename; the files
themselves are empty. You may want to record different items
which might be better stored within in a general log file.

You might also have a look at your server's event log.