Logging login/logof for users in DC

[MockY]

I wonder how I could record the daily login and logof activities for users in my domain. I tried the biult in audit but it really stinks and records alot of information I don\t want, nor is it accurate. My plan is to use it instead of employees clocking in and out every day. So if it's not possible to do so in Win 2003 Server, is there any third party application that can make this happen?

 

[markdmac]

You could fairly easily do this with vbscript as login/logoff scripts. Only problem you will run into is if you have any users that lock their computers instead of logout.

The tricky part will be deciding if you want to log to a SQL database or a text file. Writing to SQL is a little more involved but certainly not impossible. Writing to a text file is super easy.

you might want to do a little searching in forum329 as this question has been asked and answered in there a few times. If you can't find anything I will help you with the script if you post back that you need help.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

 

[MockY]

Thanks for the reply.

Writing to a MySQL database would be preferable but a text file works just as well.

I have been looking through the forum you told me to look at for a couple of hours now and unfortunately didn't find anything that resolves my issue. I am not extremely skilled in VB (only works with PHP) so creating a VBScript would be a rather hard task for me.

So if you feel like you have the time, guide me through the process would be much appreciated. Or if you could point where the solution could be found.

Thanx.

 

[AndrewTait]

Another problem with this is that, if a user logs onto more than one workstation or shares his/her password, the data you collect is not going to be very accurate.

It may only be worth it if you have smartcard authentication on your workstations, and then the user has to have the card in which to log on/log off. Again, even with this,(certainly for your techical support staff) you have the problem of logging onto more than one PC, and the risk of data mis-interpretation.

If you are having smart cards, surely it would be easier to issue them with one which will allow swiping into the building. This is not as difficult or as expensive as it may initially seem.



=======================================
So often times it happens that we live our lives in chains
And we never even know we have the key

Ne auderis delere orbem rigidum meum
======================================

 

[WhoKilledKenny]

I agree with the posts above, using logon and logoff times not a reliable means for time cards.

 

[MockY]

Smart card is not something I'm interessted in, even though I've been thinking about it. As of now I'm working on .bat files that works in conjunction with the Group Policy, but no luck so far. Am a bit novice in that particular area.

I'm intressted in what markdmac had in mind in terms of writing that info to text files, since it seem to be "super easy". yet, I have to come up with a way to do this.

 

[MockY]

I am now temporarily using a batch file who writes to a txt file every time someone logs in and out using group policies. The problem with that is clients must have write permissions to the folder and file which makes it possible for them to access it and alter the files' contents. This seems pretty odd so is there any way I can set it up so that they can write to it but to access it?

 

[MockY]

It should say "NOT to access it". Sorry about that.

 

[markdmac]

Put the files on a hidden share and switch to vbscript instead of batch files so you can have them run in the background without your users even knowing they are processing.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

 

[Stevehewitt]

Hidden file, hidden share. Batch or VB doesn't make much difference really. (As you can hide batch processing via GPO's)

Ta.




Steve.

"They have the internet on computers now!" - Homer Simpson

 

[markdmac]

Batch or VB doesn't make much difference really.

From the perspective you are referring to you are correct, however batch files require the creation of a new virtual machie where vbscript files don't. Vbscript is better from a resource perspective and a flexibility/power perspective.
My FAQ gives lots of examples and ideas of what can be done via vbscript. faq329-5798

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript