• Announcing the EduGeek Logon Tracker

    At the conference in Chorley we have announced a new piece of software for you all to use for free. It was developed by OP Software by request from us as we saw a need for a proper solution in schools. Its primary role is to log users that login to your network.
    The EduGeek Logon Tracker allows you to:
    • Limits concurrent logins to 1
    • Uses MS SQL database for storage of tracking data
    • Web based frontend for reporting and searching
    • Web based login spy for real-time login tracking
    • Web site securable with one line change
    • Very easy to deploy and use
    • Support for Windows 7 & Server 2008


    For a more complete description please see the slideshow from the conference for now until the projects site is updated. We will be posting downloads later in this article.

    Conf Presentation: http://www.edugeek.net/files/conf201...ontracker.pptx

    Download V1.00 Beta: - Click Here (1.2mb zip)
    Instructions are inside each folder.


    NOTE: some browser (chrome) have issues downloading the file, please right click->save as if your having issues.

    FAQ's

    Q: Does it recognise that a user has not logged off correctly?

    A: Yes, if the user logs back on to the same PC a mesage is logged to the database saying the user did not log off correctly and the session is reset, however if they logoin to another PC they would still be prompted that they are logged onto the other PC do they want to log it off?

    If, however, another user logs onto the first PC before the original user logs back on the sessions are reset, with messages posted to the database about the activity that has taken place.#

    Q: Can it allow more than 1 concurrent logon, i.e. for staff?

    A: Not at the moment but it is very easy to change this so it can, if we get enough requests for this we can get this added.

    Q:Can this run on CC3 Networks?

    A: We have fully tested this in live school environments running vanilla 2003 / 2008 networks and are confident in its working, as we do not have access to CC3 we have not tested and would look for feedback from users of this type of network on its ability and if required we can makes changes if there are any issues.

    Q: How do we deply this to client PCs?

    A: There is no deplyment to clients required as this is a zero footprint application.

    Q: Can the tool be customised?

    A: The website and the scripts are fully commented and broken down into blocks that allows for full customisation of message logged to the database and those that are displayed to the user. However to put thois in place requires minimal changes for it to run out of the box.
    Comments 71 Comments
    1. A5Ben's Avatar
      A5Ben -
      Yes, I've been looking to play around with this as well!!!
    1. Silvor's Avatar
      Silvor -
      Q: Can it allow more than 1 concurrent logon, i.e. for staff?
      A: Not at the moment but it is very easy to change this so it can, if we get enough requests for this we can get this added.
      This would be a very useful function. Especially if the concurrent logon count could be differentiated between users and groups of users....?
    1. TechSupp's Avatar
      TechSupp -
      Would like the option of multiple logons as a primary we have single logon for a whole class.
    1. ZeroHour's Avatar
      ZeroHour -
      Download link is now on the article for you guys to get started. Instructions in the folders.
    1. apeo's Avatar
      apeo -
      Quote Originally Posted by ZeroHour View Post
      Download link is now on the article for you guys to get started. Instructions in the folders.
      Cool, will have a play when I get a chance.

      I think it would be a good feature to have multiple logons for staff too.
    1. apeo's Avatar
      apeo -
      BTW the HOW TO INSTALL.txt file in the Website folder of the pack gives instructions on how to install the GPO Scripts.
    1. webman's Avatar
      webman -
      Isn't it a bit insecure to place domain admin credentials in a logon script which every user has access to?
    1. PiqueABoo's Avatar
      PiqueABoo -
      Isn't it a bit insecure
      I was just looking and thought that.. whether it's domain or universal local admin credentials, commercial s/w or a free lunch, the answer is always: yes.
    1. ZeroHour's Avatar
      ZeroHour -
      2 secs and I will teach you how to encode the vbs. Its pretty easy
    1. ZeroHour's Avatar
      ZeroHour -
      To encrypt (not tested it yet on its exact script):
      Download: Download details: Script Encoder
      Instructions: Script Encoder Syntax
      Basically use cmd and type SCRENC
      .vbe is the encrypted extension.
    1. fiza's Avatar
      fiza -
      Quote Originally Posted by ZeroHour View Post
      Download link is now on the article for you guys to get started. Instructions in the folders.
      What are the minimum server processor/memory requirements to run logon tracker?

      Would I be able to run it on an old Dell PE2600 with 1Gb RAM?
    1. victory2009's Avatar
      victory2009 -
      The instructions for the web site element are incorrect they are the instructions for the GPO Scripts can you please correct this, i cant figure out how to install the web site.
    1. PiqueABoo's Avatar
      PiqueABoo -
      To encrypt
      ::you just know what I'm going to say, don't you?::

      On the tin MS say: "Note that this encoding only prevents casual viewing of your code; it will not prevent the determined hacker from seeing what you've done and how". I can be a seriously determined hacker if required, but didn't have to do anything hard/determined to subsequently decode the vbe here. Well unless a quick google for a decoder counts.
    1. ZeroHour's Avatar
      ZeroHour -
      There are a couple of issues I have spotted. Updated details are following soon.
    1. webman's Avatar
      webman -
      My LoginTracker doesn't contain any usernames or passwords in the VBScript
    1. mavhc's Avatar
      mavhc -
      The Windows username is only used to remotely log off the other machine, so you need a user with just that permission I suppose
    1. plexer's Avatar
      plexer -
      Quote Originally Posted by webman View Post
      My LoginTracker doesn't contain any usernames or passwords in the VBScript
      Does that mean it's possible to stuff your db with erroneous information?

      Ben
    1. webman's Avatar
      webman -
      @plexer Yes, potentially - you'd have to create another VBScript and run it though and/or be able to send XMLHttpRequests (will be addressed in the next version). But it certainly doesn't reveal domain administration credentials.
    1. ZeroHour's Avatar
      ZeroHour -
      Quote Originally Posted by webman View Post
      My LoginTracker doesn't contain any usernames or passwords in the VBScript
      Yours also doesnt do all thats on the tin as our one. I am going to *limit* our app to allow you not to need admin details but you wont have the ability to remotely log off multiple accounts.
      The EduGeek one, when it finds multiple logins, gives you the option to remotely log off the other session which obviously can only be ran using appropriate rights.
      I will be trying to develop another way to do this which prevents the need also.
    1. webman's Avatar
      webman -
      Mine was never intended to logoff either current or existing sessions as a primary feature