How do I monitor what time a user logs on or off?

Question

I am using Windows Active Directory on a 2003 server and I need to determine what time a user has shut down their computer and turned it on for day. I know I can go physically to their PC and check event viewer and make determinations from that but I was hoping to do it secretly. I have a feeling one of the employees is being tricky and ending their work sooner then they are saying they are and I don't have time to physically stand over them and see. I have check the Security Audit Event log in Event Viewer on the server but I don't believe it is accurate because it shows several different login/logoff events throughout the day and some I know they are away from their PC.

Answer 1

You can connect to their event viewer remotely. Just go to your own PC's event viewer in the computer management console and select Action -> Connect to another computer...

Answer 2

Chris is right about remotely connecting through active directory.. you have that power and make sure you're running active directory in admin privleged..



also one additional info,

on the local workstation

go to adminsitrative tools->local system pollicy->

audit policy->turn on all the audit (from logon events ot system evnets) on both succes and failure...



this will give you logon time and logoff time and failures... and any attempst at the local policy..

Answer 3

any keystroke logger will do... and it is a hidden file !

Keylogger: FREE Home Keylogger - invisible keystroke recorder. Put ...Home Keylogger is for recording of everything that is entered from the keyboard. Keywords: keylogger, keystroke recorder, keyboard logger. link 1

link 2 is multiple others...

Answer 4

attempt to be certain if the comparable difficulty happens with a distinctive visual exhibit unit. If it does it in all possibility the drivers for the video card. Uninstall and reinstall them with the main recent drivers you will discover. If comparable element happens, attempt to replace the photos card and notice what happens.

Answer 5

if it is a network on a router try network magic

has a map

www.networkmagic.com