How do I find out when a user logged on & off in Windows Server 2008?


can info pulling log files? best tool use this? used able windows 2003.

can info pulling log files? best tool use this? used able windows 2003.

hello, 

with security auditing can accomplish it.so enable security audit on server.

the below event ids corresponding user logon & logoff respectively.

4624--an account logged on.
4634--an account logged off

more security events info can find in article



regards, ravikumar p



Windows Server  >  Windows Server General Forum



Comments

Popular posts from this blog

Error: 0x80073701 when trying to add Print Services Role in Windows 2012 Standard

Disconnecting from a Windows Server 2012 R2 file sharing session on a Windows 7,8,10 machine

Windows 2016 RDS event 1306 Connection Broker Client failed to redirect the user... Error: NULL