+ Post New Thread
Results 1 to 4 of 4
Windows Thread, Secuity Event Log Scanner/Manager in Technical; I wondered if anyone knows of a bit of software for managing event logs especially secuirty (prefriably free). I want ...
  1. #1
    jj99's Avatar
    Join Date
    Jun 2008
    Location
    Stamford
    Posts
    89
    Thank Post
    8
    Thanked 2 Times in 2 Posts
    Rep Power
    13

    Secuity Event Log Scanner/Manager

    I wondered if anyone knows of a bit of software for managing event logs especially secuirty (prefriably free). I want to be able to pick out from the logs quickly when and where a pupil logged on.

    The problem is I have 4 DC's spread over 3 schools and when i need to find out a logon and place i have to trawl through 4 logs and usually they have been overwitten.

    So ideally a centrally managed soloution would be great!

    Any ideas or suggestions

  2. #2
    Quackers's Avatar
    Join Date
    Jan 2006
    Posts
    1,320
    Thank Post
    40
    Thanked 142 Times in 117 Posts
    Rep Power
    53
    If you put this in a batch file and create a hidden share, then add it as a user logon script in group policy.

    echo DATE: %date% TIME: %time% USER: %username% COMPUTER: %computername% CLIENTNAME: %clientname% LOGONSERVER: %logonserver% ACTION: Logon >> \\planet\logs$\logons.log
    echo DATE: %date% TIME: %time% USER: %username% COMPUTER: %computername% CLIENTNAME: %clientname% LOGONSERVER: %logonserver% ACTION: Logon >> \\planet\logs$\computers\%computername%.log
    echo DATE: %date% TIME: %time% USER: %username% COMPUTER: %computername% CLIENTNAME: %clientname% LOGONSERVER: %logonserver% ACTION: Logon >> \\planet\logs$\users\%username%.log

  3. Thanks to Quackers from:

    jj99 (9th December 2008)

  4. #3
    jj99's Avatar
    Join Date
    Jun 2008
    Location
    Stamford
    Posts
    89
    Thank Post
    8
    Thanked 2 Times in 2 Posts
    Rep Power
    13
    Thanks Quackers

    Excellent works a treat, i modified and added a logoff script as well!

    If only id thought of something so simple!

  5. #4

    Join Date
    Feb 2006
    Location
    Derbyshire
    Posts
    1,381
    Thank Post
    181
    Thanked 211 Times in 171 Posts
    Rep Power
    65
    How does something like that work if 2 users manage to log on at exactly the same time? Had thought about implementing it here but the old DOS pipe (>>) seemed like it might not be that happy with multiuser access to a log file?

SHARE:
+ Post New Thread

Similar Threads

  1. Server 2003 Log on event
    By hotwired007 in forum Wireless Networks
    Replies: 4
    Last Post: 8th May 2008, 08:37 PM
  2. ASP.NET in event log
    By kerrymoralee9280 in forum Windows
    Replies: 4
    Last Post: 6th May 2008, 12:49 PM
  3. Event Log Consolidation
    By secman in forum How do you do....it?
    Replies: 0
    Last Post: 18th April 2008, 04:45 PM
  4. DHCP Event log?
    By SimpleSi in forum Windows
    Replies: 2
    Last Post: 8th February 2008, 09:28 AM
  5. Stopped security event log
    By Jobos in forum Windows
    Replies: 3
    Last Post: 10th September 2007, 12:48 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •