Track all logons on domain

[ryanak]

I know this can be done as I did it about 3 years ago, but cannot remember how.
The server is Windows Server 2008 Standard. I want the server to track ALL logons and log offs on the domain. I would prefer to do this in the Windows Security logs instead of having to run a 3rd party software.

 

[Lemon13]

http://technet.microsoft.com/en-us/library/cc787567(WS.10).aspx

M. Knorr

MCSE, MCTS, MCSA, CCNA

 

[baddos]

The logoff is a little bit tricky as it only functions on the machine that the user is actually on. So if you audit login/logout on the domain controller policy, you'll also need to add it to whatever group policy you are using for the workstations as well so you can connect to that machine and see the logout events.

 

[Roadki11]

I use a logon and logoff script in the default domain GPO to write the date, time, host name, user name, and logon or logoff to a sql database. Then I wrote a crystal report so I can review the data in a nice format. Works good, clean and simple.

RoadKi11

"This apparent fear reaction is typical, rather than try to solve technical problems technically, policy solutions are often chosen." - Fred Cohen