Reading logon/logoff datetime

[Robert Scheer]

Hi.

I need to write a service that writes to a database the time of the
logon and logoff of the users. Our users logs on Active Directory and
some can also log as local administrators. The majority of the
workstations are Windows 2000 and some are Windows XP. I am reading
about WMI but have found some limitations when reading the WMI
structures, mainly with Windows 2000.

What is the best way to read logon/logoff information in this scenario?

Thanks,
Robert Scheer

 

[ThunderMusic]

if you use .NET 2.0, you can use the Microsoft.Win32.SystemEvents class and
register (and don't forget to unregister, because it's a static event) it's
SessionSwitch event.

http://msdn2.microsoft.com/en-us/library/microsoft.win32.systemevents.sessionswitch.aspx

I hope it helps

ThunderMusic

 

[GhostInAK]

Hello Robert,
The best way is to set up the domain accounts to cause an audit event on
logon/logoff. This would write an entry to the NT Event Log whenever someone
logs on or off.

-Boo