| Forum Home | ||||
| Press F1 | ||||
| Thread ID: 42473 | 2004-02-12 03:47:00 | keep tabs on who logs on | bhoffman (5258) | Press F1 |
| Post ID | Timestamp | Content | User | ||
| 214777 | 2004-02-12 03:47:00 | Hi Is there a way I can store a log of who logs onto Windows and when etc for security purposes? Thanks :-) Ben |
bhoffman (5258) | ||
| 214778 | 2004-02-12 04:21:00 | What version of MS Windows?- win9x/ME, NT4, w2k, XP Home, XP Pro etc etc etc | mark.p (383) | ||
| 214779 | 2004-02-12 04:29:00 | If you're using Windows XP (or 2000, and presumably NT), you can do this with no third-party tools. As an administrator, open Local Security Policy (run "%SystemRoot%\system32\secpol.msc /s" from the Run prompt). Expand the Local Policies branch and select Audit Policy. Modify Audit account logon events, Audit logon events, and any other auditing options you would like. It is a good idea to select both Success and Failure, as this will allow you to see when logons failed, etc. Close Local Security Policy, and open a command prompt. Type in "gpupdate /force" to refresh the User and Computer policies. This step is not 100% necessary, but it can be handy to know, and it should bring the new policy changes into place immediately. To view the auditing logs, open Computer Management (run "%SystemRoot%\system32\compmgmt.msc /s" from the Run prompt). Under the System Tools branch, expand Event Viewer and select the 'Security' page. Whatever options you have configured to audit will be logged under here. |
agent (30) | ||
| 1 | |||||