How to find out which machine a student logged onto, & when

[indiegirl]

AD on Server 2003, I've Googled this with a few snippets of information but nothing that's come up with the full answer.

Basically, I need to know when a user last logged on, and the machine name of the logon point.

Is there a script or two that could do this?

TIA (as usual! I seem to request a lot but contribute little... ops: )

[webman]

You can use the event viewer to find this out on individual machines (connect to remote computer and view the security events) but to do this centrally you're probably looking at some third party software.

[wesleyw]

I've got a few scripts that when pupils log onto a PC it creates a running text file with machine name time date etc.. As well as username of course would this be of any use to you? You'd have to put it in to the Login and logoff scripts section of the GPO though?

If it'll help let me know and I'll dig it out for you!

Wes

[indiegirl]

Wes, that'd be super - anything would do to start... cheers!

[Ric_]

@indiegirl: ChrisH has a very advanced scripting thing involving a MySQL logging system and the ability to limit logins - I'm sure he'd love to share it with you

[DMcCoy]

@indiegirl: ChrisH has a very advanced scripting thing involving a MySQL logging system and the ability to limit logins - I'm sure he'd love to share it with you

The MS one?

[ChrisH]

No not that one cconnect or whatever it's called. Its one I was putting together myself but never got round to finishing. It's basically an improvement of the limit logon script I posted in the scripts forum. It uses database queries rather than text files. I did it this way so I could eventualy put a web front end on it to do queries.
One day soon I will get round to finishing it just not had the chance to sit down and do it lately

[wesleyw]

Yeah I was doing one of those but sorry to say using M$ (No)Access the text file one is just more reliable at the moment once I've finished the DB one I'll let you know!

Wes

[DMcCoy]

I've never tried it but ms do a limit logon app, this is from the help. Needs a sql server though afaik

LimitLogin v1.0


LimitLogin is an application that adds the ability to limit concurrent user logins in an Active Directory domain.

It can also keep track of all logins information in Active Directory domains.



LimitLogin capabilities include:

· Limiting the number of logins per user from any machine in the domain, including Terminal Server sessions.

· Displaying the logins information of any user in the domain according to a specific criterion (e.g. all the logged-on sessions to a specific client machine or Domain Controller, or all the machines a certain user is currently logged on to).

· Easy management and configuration by integrating to the Active Directory MMC snap-ins.

· Ability to delete and log off user session remotely straight from the Active Directory Users and Computers MMC snap-in.

· Generating Login information reports in CSV (Excel) and XML formats.

[ChrisH]

Weve seen that before but it involves changes in AD and at the time we were dicussing it nobody was brave enough to test it

[DMcCoy]

Perhaps I'll try it

[mikeingham]

We use LimitLogin. It was typical Microsoft to set up. i.e. jump through 26 hoops, have the right updates installed etc.

But now it is on it is very easy to use, and has stopped password sharing for the kids, and leaving laptops logged in for the Staff.

It just does what it says on the can :!:

[Michael]

I use an application called Userlock 3.0. It supports 2000/2003 Server and 2000/XP clients. Its prime job is to limit concurrent logons either at user or group level, but it does clearly state the last time, date and workstation a user logged on and logged off.

[mark]

Woah - £2300 for 1000 users - and thats WITH the educational discount!!!

[userlock 3]

[mark]

Is this the limitlogon you're talking about?: http://www.thincomputing.net/newsitem296.html