|
|
|
|
||||||
![]() |
|
|
LinkBack | Outils de la discussion |
|
|
#1 |
|
Messages: n/a
Hébergeur: |
Adde wrote:
> In Windows 2000 Server (AD) I would need to monitor user logon/logoff > times > for certain users and trying to search through audit policy events is just > not convenient. Any available scripts that would do that? > -- > fantamejthisisgoodvarjedag Someone else may have a script that reads the event logs. I have an example VBScript logon script that logs user name, computer name, IP Address, and date/time to a shared log file. The program is linked here: http://www.rlmueller.net/Logon5.htm A similar script can be used as a logoff script (configured in Group Policy). I've used similar scripts to keep track of logons. I copy the log file and read into a spreadsheet for analysis. -- Richard Mueller Microsoft MVP Scripting and ADSI Hilltop Lab - http://www.rlmueller.net -- |
|
|
|
#2 |
|
Messages: n/a
Hébergeur: |
Thanks for the info Richard.
/Adde -- fantamejthisisgoodvarjedag "Richard Mueller [MVP]" wrote: > Adde wrote: > > > In Windows 2000 Server (AD) I would need to monitor user logon/logoff > > times > > for certain users and trying to search through audit policy events is just > > not convenient. Any available scripts that would do that? > > -- > > fantamejthisisgoodvarjedag > > Someone else may have a script that reads the event logs. I have an example > VBScript logon script that logs user name, computer name, IP Address, and > date/time to a shared log file. The program is linked here: > > http://www.rlmueller.net/Logon5.htm > > A similar script can be used as a logoff script (configured in Group > Policy). I've used similar scripts to keep track of logons. I copy the log > file and read into a spreadsheet for analysis. > > -- > Richard Mueller > Microsoft MVP Scripting and ADSI > Hilltop Lab - http://www.rlmueller.net > -- > > > |
|
|
|
#3 |
|
Messages: n/a
Hébergeur: |
The "Windows 2000 Scripting Guide" describes how to write a script to query
logs: http://www.microsoft.com/technet/scr..._log_udqz.mspx You would query security logs for category logon/logoff, perhaps specifying EventCode and SourceName. -- Richard Mueller Microsoft MVP Scripting and ADSI Hilltop Lab - http://www.rlmueller.net -- "Adde" <Adde@discussions.microsoft.com> wrote in message news:0390557C-3A97-4A1B-A10D-E2535F5EB443@microsoft.com... > Thanks for the info Richard. > > /Adde > -- > fantamejthisisgoodvarjedag > > > "Richard Mueller [MVP]" wrote: > >> Adde wrote: >> >> > In Windows 2000 Server (AD) I would need to monitor user logon/logoff >> > times >> > for certain users and trying to search through audit policy events is >> > just >> > not convenient. Any available scripts that would do that? >> > -- >> > fantamejthisisgoodvarjedag >> >> Someone else may have a script that reads the event logs. I have an >> example >> VBScript logon script that logs user name, computer name, IP Address, and >> date/time to a shared log file. The program is linked here: >> >> http://www.rlmueller.net/Logon5.htm >> >> A similar script can be used as a logoff script (configured in Group >> Policy). I've used similar scripts to keep track of logons. I copy the >> log >> file and read into a spreadsheet for analysis. >> >> -- >> Richard Mueller >> Microsoft MVP Scripting and ADSI >> Hilltop Lab - http://www.rlmueller.net >> -- >> >> >> |
|
|
|
#4 |
|
Messages: n/a
Hébergeur: |
Excellent. Thanks,
/Adde -- fantamejthisisgoodvarjedag "Richard Mueller [MVP]" wrote: > The "Windows 2000 Scripting Guide" describes how to write a script to query > logs: > > http://www.microsoft.com/technet/scr..._log_udqz.mspx > > You would query security logs for category logon/logoff, perhaps specifying > EventCode and SourceName. > > -- > Richard Mueller > Microsoft MVP Scripting and ADSI > Hilltop Lab - http://www.rlmueller.net > -- > > "Adde" <Adde@discussions.microsoft.com> wrote in message > news:0390557C-3A97-4A1B-A10D-E2535F5EB443@microsoft.com... > > Thanks for the info Richard. > > > > /Adde > > -- > > fantamejthisisgoodvarjedag > > > > > > "Richard Mueller [MVP]" wrote: > > > >> Adde wrote: > >> > >> > In Windows 2000 Server (AD) I would need to monitor user logon/logoff > >> > times > >> > for certain users and trying to search through audit policy events is > >> > just > >> > not convenient. Any available scripts that would do that? > >> > -- > >> > fantamejthisisgoodvarjedag > >> > >> Someone else may have a script that reads the event logs. I have an > >> example > >> VBScript logon script that logs user name, computer name, IP Address, and > >> date/time to a shared log file. The program is linked here: > >> > >> http://www.rlmueller.net/Logon5.htm > >> > >> A similar script can be used as a logoff script (configured in Group > >> Policy). I've used similar scripts to keep track of logons. I copy the > >> log > >> file and read into a spreadsheet for analysis. > >> > >> -- > >> Richard Mueller > >> Microsoft MVP Scripting and ADSI > >> Hilltop Lab - http://www.rlmueller.net > >> -- > >> > >> > >> > > > |
|
![]() |
| Outils de la discussion | |
|
|