The easiest way to do this is to turn on auditing for logons and logoffs. In Active Directory Users and Computers, open a group policy object (GPO), and maneuver to Computer Configuration\Windows Settings\Security Settings\Local Policies\Audit Policy. Under Audit Logon Events, you can set the machine to log whenever a user attempts to log on to a system, either interactively or over the network. This will also log failed as well as successful logons and logoffs.
Dig deeper on Microsoft Windows 2000 Server Administration
Related Q&A from Serdar Yegulalp, WinIT
Frustrated admins have been dealing with extend.dat error messages since Outlook 97. Our expert sheds some light on this all-too-common Outlook error.continue reading
Have a question for an expert?
Please add a title for your question
Get answers from a TechTarget expert on whatever's puzzling you.