audit of Users history login history

[Scotmk]

Hi

 

I need to be able to get some times and dates of when a particular student has been logged into a machine, so I can see where and when a certain email was sent. (which machine he was on at the time), usually this would not prove too difficult as we would usually use RM Audit, but this is not working for some wierd reason. will try and fix later.

 

In the meantime is there any other way of doing this?

 

Thanks

 

 

Scot

[Geoff]

Assuming you enable the security log, that will tell you. Failing that, look for folder redirection and profile messages in the application/system logs.

[GlennT]

I have a Kixtart script which logs this [amongst other things]. You could tag it to the login script?

If you are interested, let me know.

[leeshellard]

I would be intrested in that kix script if you dont mind.

 

Thanks

[plock]

Simple ‘echo’ command in the student login script perhaps?

 

 
echo %DATE% %TIME% %USERNAME% %COMPUTERNAME% >> SERVERNAME\SERVERSHARE\%USERNAME%.txt

echo %DATE% %TIME% %USERNAME% %COMPUTERNAME% >> SERVERNAME\SERVERSHARE\%COMPUTERNAME%.txt

 

Or for specific user:

 

 
IF %USERNAME% == MYTESTUSER echo %DATE% %TIME% %USERNAME% %COMPUTERNAME% >> SERVERNAME\SERVERSHARE\%COMPUTERNAME%.txt

Edited January 31, 2008 by plock
added second option

[dan400007]

We've got a script running at logon and logoff that makes an entry in an Access DB with the Username, PC Name, Date and Time.

 

Makes it an easy one stop shop to find out who was last on a computer before the computer took a nose dive. Am also going to update the script over the coming months to send an alert to the administrator when certain students logon. Then if we suspect a kid is playing on the network we will hopefully know as soon as they logon and start to watch or record them.

[plock]

Nice idea 'Dan'!

[sahmeepee]

We use Kixtart to log pc name, username, ip and logon time to SQL server. Even with 1000s of logins a day the database doesn't get big at all.

 

I log IPs as well as PC names, because sometimes you need to tie an event to an IP address and it's not easy to prove which PC it belonged to 3 weeks ago.

 

I'm looking to increase the logging to include MAC addresses and possibly log off times via a logoff script - another job for the "one day" pile. Adding the logoff time to the same record as the logon would be my preferred setup.

 

If anyone wants it, send me a PM - the meat of it is in a free UDF from the KiXtart site (DBCommand.udf) - my bit adds up to 4 lines of kix + comments and a database a 6 year old could make Making it log to your choice of database server should be easy enough too.