How to get a report on users login details?

February 24, 2011 at 02:48:35
Specs: Windows 2003
Hi All
we have a domain controller installed on windows 2003 server. I need to find the log which stores the details of all users who login to the network at any time in a day. Subsequently i wish to make a report which gives
(a) Which all users logged into network and what times?
(b) How many resource hours have been consumed in a week / month etc?

I am a student of Business analysis for IT projects. I understad that there will be a log 'event viewer' which stores this kind of data but presently this log stores only the physical logins ( directly to the server login) and not login to the network. Can any one help in this regard?

Thanks
Aditya


See More: How to get a report on users login details?

Report •

#1
February 24, 2011 at 11:05:01
When you say, "login to the network" do you mean the domain? What OS is your Domain Controller using?

I use the following batch script in the login GPO so that way I don't have to filter through the event logs and DHCP reservations to get the info I need...

@echo off
cls
set AuditPath=\\10.100.100.9\Audit

echo ************************************** >> %AuditPath%\loginlog.txt
echo Logon: %computername% %username% >> %AuditPath%\loginlog.txt
date /t >> %AuditPath%\loginlog.txt
time /t >> %AuditPath%\loginlog.txt
echo ************************************** >> %AuditPath%\loginlog.txt

echo Logging IP and Open Ports for computer...
ipconfig >> %AuditPath%\%computername%.txt
netstat -a >> %AuditPath%\%computername%.txt

You also have a log off script that looks the same just notes the Logoff in the echo. This makes two files, one with a log of users logged in (loginlog.txt) and another file with connection info for the computer they are logged in on (somputername.txt). Note, this does not keep track of when a user locks a computer.

This is the cheap and dirty way of doing it but there are some open source and for pay program out there that will do NOC stuff for you. I like Solarwinds...

http://www.solarwinds.com/

Not sure if this is what you are looking for.


Report •

#2
February 24, 2011 at 22:49:52
Hi
Thanks for the prompt reply. I will look in to the solution you have suggested. The domain controller is using Windows 2003 server.

I need to say here that i am not a techie (i do not understand the script). i will forward this to my Admin and post the result to you.

Aditya


Report •

#3
March 2, 2011 at 03:48:07

Report •
Related Solutions


Ask Question