Track Nt 4.0 Domain Logoff times

[lucasi]

I have windows 98 workstations and NT 4.0 servers in a domain my users only use NT for Exchange, all file sharing is done through NetWare so they don't have NT login scripts nor are they mapping drives thgough NT. I have auditing set up to track user logon/logoff however I'm not getting an accurate logoff time. I noticed that if I log in and out within an hour or so I am getting an accurate logoff time but if I logon in the morning and logoff later that night I don't get the correct logoff time.

 

[darranagl]

I'm now sure why but it sounds like you are getting the time the lease expires not the logoff itself. New Zealand, a great place to visit.

http://www.southland.org.nz

 

[lucasi]

I'm not sure what lease you're referring to. Is there a lease on the connection to an NT domain? If so, do you know what the default lease time is and how I could increase it?

 

[darranagl]

Are you using DHCP or do you set you IP Addresses yourself.

The lease is the time your workstation keeps an IP Address. New Zealand, a great place to visit.

http://www.southland.org.nz

 

[lucasi]

We are using DHCP and we have our leases set to expire every three days. It looks like the logoff time is expiring long before the IP lease. Is there any way to track when a user logs off of the domain? Every document I've read so far has implied that there is no way however if I log into the domain and log off within an hour the time that I log off is tracked in the events of the domain controller but when I logon in the morning and don't log off until the evening I don't get the logoff time.