Need to monitor user logins and LOG them.

[Gecko]

I have searched high and low for 2 days and have come up with 1 util
(srvmgr.exe) that will show users logged in but does not keep a log. On
top of that this is a legacy NT4 util.

Does anyone out there know how to monitor and more importantly LOG when
users log in and log out of the active directory.

 

[Michael A. Covington]

In Computer Management, Domain Security Policy, look at your audit settings.

 

[Steven L Umbach]

You would have to enable auditing of logon events [acount logon does not
record logoffs] in Domain Controler Security Policy and then search the
security logs in Event Viewer on the domain controllers. Event Comb from MS
will help with the process. There will be a lot of events recorded,
including computer accounts so be sure to increas the size of you security
logs quite a bit. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;300549

 

[Karl Levinson [x y] mvp]

Other articles:

http://securityadmin.info/faq.asp#auditing

You would have to enable auditing of logon events [acount logon does not
record logoffs] in Domain Controler Security Policy and then search the
security logs in Event Viewer on the domain controllers. Event Comb from MS
will help with the process. There will be a lot of events recorded,
including computer accounts so be sure to increas the size of you security
logs quite a bit. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;300549

I have searched high and low for 2 days and have come up with 1 util
(srvmgr.exe) that will show users logged in but does not keep a log. On
top of that this is a legacy NT4 util.

Does anyone out there know how to monitor and more importantly LOG when
users log in and log out of the active directory.