Auditing Logon Events

[Guest]

I am trying to record when a user first logs on in the
morning so that we can catch the late arrivals out....I
have tried turning on Audit Logon Event on the Group
Policy on the Domain Controller OU in AD, but i get loads
of events every time a user logs in. Does anybody know
of a way of making this easier. The event log fills up
with hundreds of strange events that seem to be the same.
HELP.... I was going to output the event log into
Crystal ...after i have the right data.

Thanks
in advance..

Peter.

 

[Steven L Umbach]

Logon events will generate a lot of activity as it also records computer accounts
logging on to the domain controller. You may want to try auditing of "account logon
events" instead on the domain controllers. You can also audit "logon events" on the
workstations in the domain and it will record the time that the user logged on and
will not have as many events in the log and you can use Event Viewer to look at the
security log of other computers in the domain or use Event Comb or such to scan the
logs. --- Steve