Monitoring Logon Times

[garethEds]

Evening All,

 

Many years ago I'm sure I saw a piece of software that recorded and logged a machines logon/startup times. We have an issue where log on time from password to desktop has increased. I don't know why. I think the LEA may have removed a drive and the machine is going hunting for it - but I need to collect the evidence before I nag them about it.

 

Does anyone know of this software that will measure the different stages of logon and put them into a log file or table/graph etc?

 

Many thanks

 

Gareth

[Steve21]

If you mean the Microsoft one probably XPERF that was part of the performance kit but not sure that's been supported in a while

 

Did it look like this? https://techcommunity.microsoft.com/t5/s/gxcuf89792/images/bS0yNTU2MTgtMTY5NzIyaTYyRUEyREE5OEQyNjQxRUE?image-dimensions=571x321&revision=4

 

Steve

[garethEds]

If you mean the Microsoft one probably XPERF that was part of the performance kit but not sure that's been supported in a while

 

Did it look like this? https://techcommunity.microsoft.com/t5/s/gxcuf89792/images/bS0yNTU2MTgtMTY5NzIyaTYyRUEyREE5OEQyNjQxRUE?image-dimensions=571x321&revision=4

 

Steve

 

No - I don't think that was it. It looked very much like a log that you could read in CMTrace.

 

I need to see how fast each bit of the startup process is taking. I'm sure it's drive mappings. Would there be anything in the event log do you think?

 

Gareth

[garethEds]

Hi - I've found I can do it possibly through Group Policy Modelling so in the middle of trying that.

 

Gareth