Logging/monitoring users

  • Thread starter Thread starter Pablo
  • Start date Start date
P

Pablo

I know Windows has an option for Auditing login
success/failures, but it is not that great. Does anyone
know of a tool that can monitor/log an entire Windows
2000 domain when users log in and out successfully or
fail?

We have a lockout policy in place after 3 attempts. One
user is getting locked out, but we have no way of knowing
why. If we had a tool that tracked what PC is causing
thsi it would help!
 
I've never used it but MOM may be able to see this. You could also output
your event logs to a database/syslog, and use some scheduled query to report
this type of thing.
 
I know Windows has an option for Auditing login
success/failures, but it is not that great. Does anyone
know of a tool that can monitor/log an entire Windows
2000 domain when users log in and out successfully or
fail?
Click to expand...

Well, auditing does this for you. Perhaps your issue is in analyzing
the event logs.
We have a lockout policy in place after 3 attempts. One
user is getting locked out, but we have no way of knowing
why. If we had a tool that tracked what PC is causing
thsi it would help!
Click to expand...

Try the log parser tool from Microsoft, or export the security log and
search for the account name.

Jeff
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

User locked out with event 537 under type 11 logon 7
Failure audits not being logged 1
Audit Account Logon Events 3
Account Lockout policy problem 1
Auditing / Event Log Entries... 4
Authentication Auditing 5
Problems with Security Policy 1
How to know from which machine a user logged on to the domain 1

Back
Top