Herb Martin said:
You can turn on "Account Logon Auditing" and (try) to write a script
that will extract the info you need -- writing the script isn't hard but
the domain doesn't really track logon time but rather records when an
authentication happens.
Also this will do nothing for users who logon but perform no work,
nor for those who never logoff.
You might wish to search (Google groups) these newsgroups for
past discussions -- there have been many -- of this topic.
You can also (probably) buy a third party application that will
approximate what you seek -- such will also be mentioned in
most of those previous discussions available by searching.
In general, there are no perfect solutions to the typical goals behind
a request such as yours.
One solution might be to use logon and logoff scripts specified by a Group
Policy. The scripts can log the user name, computer name, and current
date/time to a log file. I have a sample VBScript logon script linked here
that appends a line with this information to a log file:
http://www.rlmueller.net/Logon5.htm
A similar logoff script can log similar information. I have used similar
scripts in the past. The log file can be imported into a spreadsheet for
analysis. The log file must be in a location that all users have write
access to. Note the logoff script will not run if the computer is powered
off. However, you could also have startup and shutdown scripts that log
computer name and date/time (not user name, since there is no user). Startup
and shutdown scripts must log to a location that the computer object has
write access to (or the group "Domain Computers").
