Tracking user logins

[max7600]

Does anyone know of any way to see if a user has logged onto the network on a certain day? The big problem here is that we are trying to track user activity for a 2 week period of time at the end of May 2002.

the first question we have to answer is whether or not some people logged in on certain day the second is what did they do generally.

Please assist if you can.

We are using Windows NT 4.0 server spk6 and windows NT 4.0 workstation. Would it be possible to check internet records or something

 

[wolluf]

Event viewer(s)?

 

[max7600]

Tried Event Viewer but the log have been overwritten for the times in questions. Any other ideas???

 

[djhawthorn]

You can change the Event Viewer settings to "only overwrite events older than X days" - just make sure you enlarge the log file size so as to not fill it completely (before it is allowed to overwrite events). MCSE NT4/W2K

 

[aker]

Do you make daily and weekly backups of your NT Server. Maybe somebody could tell you how to replace the current log with the one for that period allowing you to do your check. I have no idea if this is possible.