Try eventcombMT.exe, part of secops: http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=9989D 151-5C55-4BD3-A9D2-B95A15C73E92 Sincerely,
D�j� Ak�m�l�f�, MCSE MCSA MCP+I Microsoft MVP - Directory Services www.readymaids.com - we know IT www.akomolafe.com Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon ________________________________ From: [EMAIL PROTECTED] on behalf of Caple, Andrew Sent: Thu 8/5/2004 5:31 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] Extracting information for Event Logs Good morning everyone, I've been asked to extract some information from our RAS server to see who has been dialling in over a certain period of time. The RAS server is an NT4 server. When I connect to it and have a look at the "Security" event logs I can see the entry: Failure Audit 05/08/2004 10:47:53PM Security Logon/Logoff This can be exported to a text file, however I need to extract the user name from the log entry - is this possible? Regards, Andrew P.S -- have a good weekend!!! List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
