+ Post New Thread
Results 1 to 12 of 12
Windows Thread, Account Logon Notification in Technical; Hi, Does anybody know of a way to be notified when certain accounts logon to the network? For example a ...
  1. #1

    Join Date
    Jan 2009
    Location
    Gravesend
    Posts
    103
    Thank Post
    4
    Thanked 19 Times in 9 Posts
    Rep Power
    15

    Account Logon Notification

    Hi,

    Does anybody know of a way to be notified when certain accounts logon to the network? For example a hidden account that is used to catch the students sending spam around....

    Don't worry if you don't, it will just mean getting my VB.net scripting hat back out of the box

    Thanks

  2. #2

    Steve21's Avatar
    Join Date
    Feb 2011
    Location
    Swindon
    Posts
    2,698
    Thank Post
    335
    Thanked 515 Times in 483 Posts
    Rep Power
    179
    Depends how you mean, If you want it to alert server side? Client side? Or what.

    Steve

  3. #3

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    11,225
    Thank Post
    874
    Thanked 2,717 Times in 2,302 Posts
    Blog Entries
    11
    Rep Power
    780
    If you have 2008 domain controllers then you can use a scheduled task that looks for the logon event and checks if the username you are after is present using the custom filter option. You can then just use a command line email sending application or a script to send an email.

    You could also make an app that subscribes to the windows event log service and checks for the username then does the same but it seems like overengineering.

  4. #4

    Join Date
    Jan 2009
    Location
    Gravesend
    Posts
    103
    Thank Post
    4
    Thanked 19 Times in 9 Posts
    Rep Power
    15
    Sorry forgot to mention some important details, guess that's what I get for doing multiple things at once!

    We run a 2003 DCs, on a 2000native domain level! I know upgrade time!
    Ideally I would like it to be almost instant, so that we can catch them in the act. So it would need to alert us in the office.....

    Any ideas would be great fully received.

  5. #5

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    11,225
    Thank Post
    874
    Thanked 2,717 Times in 2,302 Posts
    Blog Entries
    11
    Rep Power
    780

  6. #6

    Join Date
    Jan 2006
    Location
    Surburbia
    Posts
    2,178
    Thank Post
    74
    Thanked 307 Times in 243 Posts
    Rep Power
    115
    You could also make an app that subscribes to the windows event log service and checks for the username then does the same but it seems like overengineering.
    I hope it is easier now, but when I tried that with dotNet a few years ago it was rate limited i.e. your callback code would be thrown a new event record at a maximum rate of something like one every two seconds i.e. if 100 happened in that period you only saw one of them. That behaviour was explicitly mentioned in the kind of MS documentation you only find *after* you've spent a while wondering if you've done something so incredibly stupid you can't see it.

    [Already had 'old school' code that polled the logs and was contemplating updating/simplifying it with the subscription method, but gave up on that ].

  7. #7
    TheScarfedOne's Avatar
    Join Date
    Apr 2007
    Location
    Plymouth, Devon
    Posts
    1,346
    Thank Post
    676
    Thanked 169 Times in 154 Posts
    Blog Entries
    78
    Rep Power
    85
    I could probably modify the script i have for checking the workstation name to instead do a case statement on logged on username and trigger an SMTP call. Will have a go at it next week...

  8. #8

    Join Date
    Jan 2009
    Location
    Gravesend
    Posts
    103
    Thank Post
    4
    Thanked 19 Times in 9 Posts
    Rep Power
    15
    Thanks all for your advice - been playing in VB2010 today and not actually progressed very far to be fair. Think this might be an easier said than done sort of thing....

  9. #9
    ricki's Avatar
    Join Date
    Jul 2005
    Location
    uk
    Posts
    1,475
    Thank Post
    20
    Thanked 164 Times in 157 Posts
    Rep Power
    52
    HI

    Have a look at net send Microsoft Corporation and may be put it in a log on script for that user.

    Richard

  10. #10

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,262
    Thank Post
    242
    Thanked 1,572 Times in 1,252 Posts
    Rep Power
    340
    If you open up Computer Management, you can view Sessions and Open Files. Not the best way, but this can give you an idea who's on the network.

  11. #11

    ZeroHour's Avatar
    Join Date
    Dec 2005
    Location
    Edinburgh, Scotland
    Posts
    5,746
    Thank Post
    915
    Thanked 1,334 Times in 814 Posts
    Blog Entries
    1
    Rep Power
    447
    What OS is your clients?
    I have seen a couple of examples of scripts to get around this, googling.

  12. #12

    webman's Avatar
    Join Date
    Nov 2005
    Location
    North East England
    Posts
    8,406
    Thank Post
    640
    Thanked 961 Times in 661 Posts
    Blog Entries
    2
    Rep Power
    324
    If you implemented my LoginTracker system, you could modify that to email you when a certain user logs in.

    That is a planned feature for the future of LoginTracker, but should be easy enough to add on yourself with a bit of PHP knowledge.

SHARE:
+ Post New Thread

Similar Threads

  1. Exam account logon availability
    By Bertie_Dellend in forum Windows Server 2000/2003
    Replies: 2
    Last Post: 27th April 2011, 01:03 PM
  2. AUP logon acceptance program
    By mark in forum Downloads
    Replies: 10
    Last Post: 12th May 2010, 08:15 PM
  3. Limit Logon VBS Version
    By ChrisH in forum Scripts
    Replies: 29
    Last Post: 17th August 2009, 02:47 PM
  4. BGInfo on logon screen
    By Ric_ in forum Windows
    Replies: 17
    Last Post: 16th September 2006, 01:25 AM
  5. Power Settings on Logon Screen
    By mattpant in forum Windows
    Replies: 19
    Last Post: 15th September 2005, 07:30 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •