Or you could create a custom view in the event log reader, sorting for the events you're interested in, and use "Attach Task To This Event..."
From: Rankin, James R [mailto:[email protected]] Sent: Tuesday, December 04, 2012 4:30 PM To: NT System Admin Issues Subject: Re: Server login reporting I would think a bit of event log parsing thru PowerShell or a command-line tool like dumpel combined with blat or some other tool might do the trick? ---Blackberried ________________________________ From: Gavin Wilby <[email protected]> Date: Tue, 4 Dec 2012 22:12:30 +0000 To: NT System Admin Issues<[email protected]> ReplyTo: "NT System Admin Issues" <[email protected]> Subject: Server login reporting Hi, I need a bit of software that can email me every time a User logs onto the console or RDP to a 2008R2 domain controller. Logging the source IP of any remote connections would be desirable. I know the sec log shows this, but its a nightmare to go through. Any ideas? Gavin. -- Gavin Wilby, Twitter: http://twitter.com/gavin_wilby GSXR Blog: http://www.stoof.co.uk ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
