Login/Logout auditing

In an earlier post, a response was given which I have included below:


"You should be able to see the logins in the security log. That is, if you
have turned on auditing of login and logout events."

I have searched the KB and NG's but cannot locate specific instructions on
HOW to initiate LOGIN/LOGOUT auditing.

Can someone send me a link or tell me how to do this?

TIA

RickD

In addition, I would like to force a logout of all desktops before my
scheduled backup begins.

Thanks again.

Cyberwizard
Thu Jan 27 13:57:04 CST 2005

There is another way of doing this,

I use a script for logon and logoff

Dim WSHShell
Dim WSHNetW
Set WSHShell = WScript.CreateObject("WScript.Shell")
Set WshNetw = Wscript.CreateObject("Wscript.Network")

' Get the computer's IP address by looking at network adapters.
for each Config in
GetObject("winmgmts:{impersonationLevel=impersonate}").InstancesOf
("Win32_NetworkAdapterConfiguration")
If VarType(Config.Ipaddress(0)) = 8 Then
If not Config.Ipaddress(0) = "0.0.0.0" Then
myip = Config.IPaddress(0)
End If
End If
Next

servername = "<YOURSERVERNAMEGOESHERE" 'Name of the server on which you want
the logons to be logged.

WSHShell.LogEvent 8, "User " & WSHNetw.username & " Logged on to " &
WSHNetw.computername & " [" & myip & "] on "& date & " at " & time, servername

and for logoff just change the Logged on to Logged Off... sends back to your
application log on your server, I assume that you know where the scripts are
run from... think GPO... are all your users in OU's?





"Rick DIlley" wrote:

> In an earlier post, a response was given which I have included below:
>
>
> "You should be able to see the logins in the security log. That is, if you
> have turned on auditing of login and logout events."
>
> I have searched the KB and NG's but cannot locate specific instructions on
> HOW to initiate LOGIN/LOGOUT auditing.
>
> Can someone send me a link or tell me how to do this?
>
> TIA
>
> RickD
>
> In addition, I would like to force a logout of all desktops before my
> scheduled backup begins.
>
> Thanks again.
>
>
>
>