IIRC, lock/unluck events are recorded locally, not on a DC. While a couple of the responses sort of imply it, I'll make it explicit: AFAIK, if you want to drill down like that, you'll need to gather the security events from the individual workstations, as well as the DCs.
Kurt On Wed, Jan 18, 2012 at 10:32, Jonathan Link <[email protected]> wrote: > Also, doesn't a lock/unlock count as a logoff/logon? I'm usre about the > unlock being a login event. Not sure about the lock... > > On Tue, Jan 17, 2012 at 2:09 PM, Sam Cayze <[email protected]> wrote: >> >> +1. Hoping someone would mention that so I didn’t have to. Well put. >> >> >> >> Might as well just give them timecards. >> >> >> >> That aside, LogMeIn Free gives some quick and easy numbers for when the PC >> was turned on, if they are logged in, and how long their mouse/keyboard has >> been idle for. We’ve used from time to time just to see if someone is >> available/online… (We make our own hours here). >> >> >> >> Sam >> >> >> >> >> >> From: David Lum [mailto:[email protected]] >> Sent: Tuesday, January 17, 2012 12:33 PM >> >> >> To: NT System Admin Issues >> Subject: RE: Last Logon >> >> >> >> <Editorial> >> >> Sounds like a place to hate – VP’s wanting to watch managers login/logout >> times doesn’t sound like a place of professionalism, more like babysitting. >> Seems to me if there are expectations set and not being met then no need to >> monitor folks. “Do this and this, get it done by N with X standards of >> quality”. Can’t meet the deadline? Remedy that. If they’re able to meet all >> goals and it seems like there’s a lot of leftover time, add tasks/goals. >> >> >> >> I’m no manager but I am at my desk well before my assigned time, regularly >> leave after my assigned time, and do far more work from home than has ever >> been asked, and I still dislike the sound of VP’s trying to micromanage >> manager’s time (which really, that’s what this is). >> >> </Editorial> >> >> >> >> What about if they stay logged in and just WINDOWSKEY+L their machine? >> You’ll get no logout time. >> >> >> >> From: [email protected] [mailto:[email protected]] >> Sent: Tuesday, January 17, 2012 10:13 AM >> To: NT System Admin Issues >> Subject: RE: Last Logon >> >> >> >> VP's want to know when the Managers are getting to work and leaving for >> the day. >> >> Login time and logout time. >> >> >> >> >> >> From: David Lum [mailto:[email protected]] >> Posted At: Tuesday, January 17, 2012 12:48 PM >> Posted To: [email protected] >> Conversation: Last Logon >> Subject: RE: Last Logon >> >> >> >> Do you need a report of when they last logged in to find out if they are >> no longer used? >> >> If yes: >> >> www.joeware.net >> >> oldcmp.exe -users -report -llts -age 0 -format csv -file "users.txt" >> >> >> >> If no: Please clarify, but you will likely want an event log >> monitoring/logging solution. If you have multiple DC’s the solution will >> need to be able to aggregate the results from them. >> >> >> >> Dave >> >> >> >> >> >> From: [email protected] [mailto:[email protected]] >> Sent: Tuesday, January 17, 2012 9:32 AM >> To: NT System Admin Issues >> Subject: Last Logon >> >> >> >> Windows 2003 Domain. >> >> I need to generate reports of when users are logging in and out of the >> network? >> >> >> >> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ >> ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ >> >> --- >> To manage subscriptions click here: >> http://lyris.sunbelt-software.com/read/my_forums/ >> or send an email to [email protected] >> with the body: unsubscribe ntsysadmin >> >> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ >> ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ >> >> --- >> To manage subscriptions click here: >> http://lyris.sunbelt-software.com/read/my_forums/ >> or send an email to [email protected] >> with the body: unsubscribe ntsysadmin >> >> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ >> ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ >> >> --- >> To manage subscriptions click here: >> http://lyris.sunbelt-software.com/read/my_forums/ >> or send an email to [email protected] >> with the body: unsubscribe ntsysadmin >> >> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ >> ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ >> >> --- >> To manage subscriptions click here: >> http://lyris.sunbelt-software.com/read/my_forums/ >> or send an email to [email protected] >> with the body: unsubscribe ntsysadmin >> >> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ >> ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ >> >> --- >> To manage subscriptions click here: >> http://lyris.sunbelt-software.com/read/my_forums/ >> or send an email to [email protected] >> with the body: unsubscribe ntsysadmin > > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > --- > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to [email protected] > with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
