Script to log users

[MattDLEA]

Does anyone have a script or a way to log when someone logs onto a computer?

 

I need to know when someone logs onto a computer or server but instead of event view I would like it sent to a file, both local and RDP logons wouldbe ideal

[3s-gtech]

echo %date% %time% %computername% %username% >>\\server\logs\logon.txt

 

Nice and simple, quick and reliable. The log will get big - you can set it to do a date stamped file on each day:

 

echo %date% %time% %computername% %username% >>\\server\logs\%date:~-4,4%%date:~-7,2%%date:~-10,2%_logon.txt

 

Save this as .cmd and set it as a logon script.

[Marshall_IT]

Hi,

 

My colleague wrote this a couple of years ago.

It writes a file for each user listing the computers they log on to, and a file for each computer listing the users that have logged on.

 

Title Track Users

REM Make Dir if not exist!
IF NOT EXIST "\\FileServer\usertracking$\%username%" MD "\\FileServer\usertracking$\%username%"


REM Create Log and filename using current date
FOR /F "tokens=1-3 delims=/ " %%I IN ('date /t') DO SET LogName=%%K.%%J.%%I.csv

REM Create log entries
echo Logon,%date%,%time%,%computername%,%username%,%LogonServer% >>"\\FileServer\usertracking$\%username%\%LogName%"


REM COMPUTER TRACKING SECTION ---------------------->

REM Make Dir if not exist!
IF NOT EXIST "\\FileServer\usertracking$\0_Computers_0\%computername%" MD "\\FileServer\usertracking$\0_Computers_0\%computername%"


REM Create Log and filename using current date
FOR /F "tokens=1-3 delims=/ " %%I IN ('date /t') DO SET LogName=%%K.%%J.%%I.csv

REM Create log entries
echo Logon,%date%,%time%,%computername%,%username%,%LogonServer% >>"\\FileServer\usertracking$\0_Computers_0\%computername%\%LogName%"

 

Here is one to track logoffs too.

 

Title Track Users

REM Make Dir if not exist!
IF NOT EXIST "\\FileServer\usertracking$\%username%" MD "\\FileServer\usertracking$\%username%"


REM Create Log and filename using current date
FOR /F "tokens=1-3 delims=/ " %%I IN ('date /t') DO SET LogName=%%K.%%J.%%I.csv

REM Create log entries
echo Logoff,%date%,%time%,%computername%,%username% >>"\\FileServer\usertracking$\%username%\%LogName%"


REM COMPUTER TRACKING SECTION ---------------------->

REM Make Dir if not exist!
IF NOT EXIST "\\FileServer\usertracking$\0_Computers_0\%computername%" MD "\\FileServer\usertracking$\0_Computers_0\%computername%"


REM Create Log and filename using current date
FOR /F "tokens=1-3 delims=/ " %%I IN ('date /t') DO SET LogName=%%K.%%J.%%I.csv

REM Create log entries
echo Logoff,%date%,%time%,%computername%,%username% >>"\\FileServer\usertracking$\0_Computers_0\%computername%\%LogName%"