Logiing TS logon/logoff's and activity...

[Brad Pears]

I have been asked by our owner (control freak) to provide details as far as
not only when users are logging in, but how long they were on line, and what
apps were runing.

Is there any way to provide this type of information ?

Brad

 

[Vera Noest [MVP]]

If you enable auditing of security events, you will see all logon
and logoff events in the Security tab of the EventLog on the TS.

You can filter and export these events once a month to a tab-
delimited textfile for further processing.

Or you could make your own, very simple logon report by adding a
line to your TS-specific login script:

echo %username% %clientname% %date% %time% >> logon.log

195461 - How to Set Up a Logon Script Only for Terminal Server
Users
http://support.microsoft.com/?kbid=195461

To monitor what apps users are running, you will need some sort of
3th party monitoring/accounting utility.

 

[Brad Pears]

where/how do you enable logging of security events

Thanks,

Brad

 

[Vera Noest [MVP]]

In the appropriate default security policy:

Computer Configuration\Windows Settings\Security Settings\Local
Policies\Auditing

 

[Brad Pears]

Thanks Vera...

In the appropriate default security policy:

Computer Configuration\Windows Settings\Security Settings\Local
Policies\Auditing

--
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
http://hem.fyristorg.com/vera/IT
--- please respond in newsgroup, NOT by private email ---

 

[Tahir Saleem]

Hi.

For monitoring current running apps / process. Use the following command:

query process %username%

This command will list all process the current logged inn user is running.

Tahir Saleem