How can I review the user login history of a particular machine?

Laura Hunter

Published: 07 May 2004

How can I review the user login history of a particular machine? We're running Win2k active directory in a school environment, and I need to find out who has been logging in to a certain machine during the day.
Configure the Audit Policy in the Default Domain GPO to audit success/failure of Account Logon Events and Logon Events. You can use a free utility such as EventCombMT ( http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=9989D151-5C55-4BD3-A9D2-B95A15C73E92) to collect the audit data from several machines into a single location for easy viewing and analysis.

Dig Deeper on Enterprise infrastructure management

What to configure in Windows Server local security policy Organizations should configure the local security policy for new servers to handle patch management and for protection against unauthorized access.

Using AuditPol to audit Windows users and set policies Solution providers may find value in the AuditPol utility for auditing and organizing Windows users, setting policies and configuring settings such as user privileges.

Server security auditing: knowledge vs. performance Security auditing can cause a real server performance hit, especially using Windows' native feature. Learn here how you can ease the pain.

Configuring Windows 7 audit, group policy settings Learn the ins and outs of Windows 7 audit and group policy settings, including account logon and management, and other factors to consider when configuring auditing controls.

Windows 7 audit object access categories, user permissions Solution providers can configure Windows 7 audit object access and user logon and logoff settings to achieve optimal security levels in their customer's environment.

Windows 7 audit policies, user privileges configuration Find out how to audit Windows 7 audit policies themselves and read what you need to know about configuring Windows 7 user privileges.

Related Q&A from Laura Hunter

How can I get certain PCs to run faster on network shared drives?

Active Directory expert Laura E. Hunter offers a tip for shortening client wait times. Continue Reading

Can I modify the CN attribute of the users of an organization unit?

Active Directory expert Laura E. Hunter explains to a reader what must be done to change the default display specifiers for new users in Active ... Continue Reading

What should I know about subnets when removing sites from an AD environment?

Active Directory expert Laura E. Hunter tells a reader what to keep in mind when deleting subnets associated with sites being removed in an ... Continue Reading

Have a question for an expert?

Please add a title for your question

Get answers from a TechTarget expert on whatever's puzzling you.

Meet all of our Windows Server experts

View all Windows Server questions and answers

SearchServerVirtualization

Understand and deploy IBM Cloud for VMware Solutions

The IBM-VMware partnership has provided a platform for admins committed to VMware technologies who also require cloud benefits ...

How AppDefense works to detect app and VM anomalies

AppDefense, a newer addition to the VMware security tool portfolio and part of the vSphere Platinum edition, helps organizations ...

Import and export Hyper-V VMs with Hyper-V Manager and PowerShell

When migrating VMs, admins can use Hyper-V Manager's export and import capabilities for small sets of VMs or PowerShell for ...

SearchCloudComputing

Google to unveil post-Chronicle cloud cybersecurity plans

Google plans to discuss its cloud cybersecurity portfolio at a conference next week, with the capabilities developed by Chronicle...

Get to know popular cloud monitoring tools

With so many cloud monitoring services on the market, it can be difficult to choose. Review some of the popular tools available ...

Get to know Microsoft Azure Cosmos DB use cases

Organizations can deploy Cosmos DB for a range of important applications. Learn how to bolster Azure workloads with this ...

SearchSQLServer

SQL Server database design best practices and tips for DBAs

Good database design is a must to meet processing needs in SQL Server systems. In a webinar, consultant Koen Verbeeck offered ...

SQL Server in Azure database choices and what they offer users

SQL Server databases can be moved to the Azure cloud in several different ways. Here's what you'll get from each of the options ...

Using a LEFT OUTER JOIN vs. RIGHT OUTER JOIN in SQL

In this book excerpt, you'll learn LEFT OUTER JOIN vs. RIGHT OUTER JOIN techniques and find various examples for creating SQL ...

SearchEnterpriseDesktop

Project Limitless' 5G PC and what desktop admins need to know

Qualcomm and Lenovo have partnered to produce a 5G-enabeled PC that could be a game-changer for remote workers. IT must prepare ...

Jamf Protect offers visibility, protection for macOS admins

Jamf Protect, the new endpoint security software announced at JNUC 2019, provides organizations with a native macOS tool that ...

Compare Windows 10 OS editions to determine the best fit

Organizations deploying Windows 10 must choose between multiple Windows 10 OS editions. Delve into the different features that ...

SearchVirtualDesktop

Compare offerings from 3 major desktop-as-a-service providers

Three desktop-as-a-service providers, Citrix, VMware and Microsoft, all offer virtual desktops as a part of their cloud services....

How to use VMware Horizon Performance Tracker

A good user experience is essential for VDI. Learn how to install and use VMware Horizon Performance Tracker to take the pulse of...

10 Microsoft Ignite 2019 sessions for VDI admins

VDI admins attending Microsoft Ignite 2019 could benefit from attending these 10 sessions. This guide can help to build a session...

Join the conversation

2 comments

Send me notifications when other members comment.

Oldest

[-]

AnonymousUser - 27 Aug 2013 8:47 AM

review a particular user login hisory. logintimer
http://logintimer.weebly.com

chrisbunn - 20 Nov 2014 7:58 AM

To provide organizations with the controls, insight and response that is needed to effectively monitor user logins across a Windows network, have a look at UserLock.
http://www.isdecisions.com/blog/it-security/monitor-user-activity-on-windows-server-network/

How can I review the user login history of a particular machine?

Dig Deeper on Enterprise infrastructure management

Related Q&A from Laura Hunter

How can I get certain PCs to run faster on network shared drives?

Can I modify the CN attribute of the users of an organization unit?

What should I know about subnets when removing sites from an AD environment?

Have a question for an expert?

Join the conversation

2 comments

Please create a username to comment.

-ADS BY GOOGLE

SearchServerVirtualization

Understand and deploy IBM Cloud for VMware Solutions

How AppDefense works to detect app and VM anomalies

Import and export Hyper-V VMs with Hyper-V Manager and PowerShell

SearchCloudComputing

Google to unveil post-Chronicle cloud cybersecurity plans

Get to know popular cloud monitoring tools

Get to know Microsoft Azure Cosmos DB use cases

SearchSQLServer

SQL Server database design best practices and tips for DBAs

SQL Server in Azure database choices and what they offer users

Using a LEFT OUTER JOIN vs. RIGHT OUTER JOIN in SQL

SearchEnterpriseDesktop

Project Limitless' 5G PC and what desktop admins need to know

Jamf Protect offers visibility, protection for macOS admins

Compare Windows 10 OS editions to determine the best fit

SearchVirtualDesktop

Compare offerings from 3 major desktop-as-a-service providers

How to use VMware Horizon Performance Tracker

10 Microsoft Ignite 2019 sessions for VDI admins

Dig Deeper on Enterprise infrastructure management

Related Q&A from Laura Hunter

Have a question for an expert?

Join the conversation

2 comments

Register

Login

Forgot your password?

Your password has been sent to:

Please create a username to comment.