Logging/monitoring users

  • Thread starter Thread starter Pablo
  • Start date Start date
P

Pablo

I know Windows has an option for Auditing login
success/failures, but it is not that great. Does anyone
know of a tool that can monitor/log an entire Windows
2000 domain when users log in and out successfully or
fail?

We have a lockout policy in place after 3 attempts. One
user is getting locked out, but we have no way of knowing
why. If we had a tool that tracked what PC is causing
thsi it would help!
 
I've never used it but MOM may be able to see this. You could also output
your event logs to a database/syslog, and use some scheduled query to report
this type of thing.
 
I know Windows has an option for Auditing login
success/failures, but it is not that great. Does anyone
know of a tool that can monitor/log an entire Windows
2000 domain when users log in and out successfully or
fail?
Click to expand...

Well, auditing does this for you. Perhaps your issue is in analyzing
the event logs.
We have a lockout policy in place after 3 attempts. One
user is getting locked out, but we have no way of knowing
why. If we had a tool that tracked what PC is causing
thsi it would help!
Click to expand...

Try the log parser tool from Microsoft, or export the security log and
search for the account name.

Jeff
 
Back
Top