Who has logged on where?

[RiffRaff]

Can anybody tell me how I can get a log of of all our pupils and staff logons?

It's mainly to be able to show who was sat a particular PC at a particular time (in the event of vandalism etc.)

Thanks

[MattHarwood]

I have a batch script for this. PM me your email if you'd like a copy!

[british_government]

Im sure there is probably a built in windows solution but i highly recomend this software. Computer and Internet Monitoring Software - Forensic Software
Policy Central takes screen captures if any banned word ever appears on a student's screen, you can get a lot of false positives but even if it is just 0.1% you pick up it is worth it.

Also, back to your original post, you can setup an AUP that shows on every logon and it records, who when and where this AUP is accepted, making tracking machine and students is very very easy.

[SC92]

If you go to the C: drive of a station, and (depending on OS) navigate to the Users folder or Documents & Settings on Windows 7, and then all you have to do is filter it into date order accordingly. Shows the date/time logged out of stations for us. Not sure if this is the kind of solution you had in mind but it's a start at least hopefully.

[FN-GM]

I use these batch files at logon and logoff

rem The following line creates a rolling log file of usage by workstation
echo Log In %Date% %TIME% %USERNAME% >> \\server\share\%COMPUTERNAME%.log

rem The following line creates a rolling log file of usage by user
echo Log In %Date% %TIME% %COMPUTERNAME% >> \\server\share\%USERNAME%.log

rem The following line creates a rolling log file of usage by workstation
echo Log Out %Date% %TIME% %USERNAME% >> \\server\share\%COMPUTERNAME%.log

rem The following line creates a rolling log file of usage by user
echo Log Out %Date% %TIME% %COMPUTERNAME% >> \\server\share\%USERNAME%.log

[MattHarwood]

Exactly the same here

I use these batch files at logon and logoff

rem The following line creates a rolling log file of usage by workstation
echo Log In %Date% %TIME% %USERNAME% >> \\server\share\%COMPUTERNAME%.log

rem The following line creates a rolling log file of usage by user
echo Log In %Date% %TIME% %COMPUTERNAME% >> \\server\share\%USERNAME%.log

rem The following line creates a rolling log file of usage by workstation
echo Log Out %Date% %TIME% %USERNAME% >> \\server\share\%COMPUTERNAME%.log

rem The following line creates a rolling log file of usage by user
echo Log Out %Date% %TIME% %COMPUTERNAME% >> \\server\share\%USERNAME%.log

[cpjitservices]

I can't get the script to create the log file... I get UNC not supported.

[DaveP]

I can't get the script to create the log file... I get UNC not supported.

Have you created the share at the server properly? [Have you created the share at all? (I ask this because I saw someone else make the same mistake a long time ago]
Have you checked the Sharing Permissions/Security Permissions?
Could there be an error in your script?

[cpjitservices]

Yep share created, Setup permissions so that the user accounts and admins can write to the folder.

The script could be wrong but I copy and pasted it and all I changed was the part where I enter my servers details.

[DaveP]

Can you browse to the location on the server where you have set up the shares in [Windows] Explorer?

[cpjitservices]

Indeed I can, even on a standard user account I can browse to it, although it may be that batch files and CMD are disabled on accounts in GPO, I have copied the scripts into my netlogon folder and assigned them as logon and logoff scripts in GPO.

[DaveP]

Can you run the batch file as a privileged [Administrator/Technician?] user?

Does it create the entries in the log file[s] as you would expect?

[sidewinder]

I use these batch files at logon and logoff

rem The following line creates a rolling log file of usage by workstation
echo Log In %Date% %TIME% %USERNAME% >> \\server\share\%COMPUTERNAME%.log

rem The following line creates a rolling log file of usage by user
echo Log In %Date% %TIME% %COMPUTERNAME% >> \\server\share\%USERNAME%.log

rem The following line creates a rolling log file of usage by workstation
echo Log Out %Date% %TIME% %USERNAME% >> \\server\share\%COMPUTERNAME%.log

rem The following line creates a rolling log file of usage by user
echo Log Out %Date% %TIME% %COMPUTERNAME% >> \\server\share\%USERNAME%.log

Thankyou for this, so simple I dont know why I didnt think of it before. Previously had everything writing to a single file, which obviously made it a huge pain trying to search through for a single PC/user

[internetuser]

Any way to get this to write to a database, either via a bat or vbs/powershell ?

[internetuser]

found it, this is what I needed to use

IPCONFIG |FIND "IP" > %TEMP%.\TEMP.DAT
FOR /F "tokens=2 delims=:" %%a in (%TEMP%.\TEMP.DAT) do set IP=%%a
del %TEMP%.\TEMP.DAT
set IP=%IP:~1%

echo %username%, %computername%, %date%, %time%, %ip% >>\\server\share\logon.csv