Can I check my workmates logging on/off times?
Can I check my workmates logging on/off times?
Author
Discussion

hedders

Original Poster:

24,460 posts

277 months

Monday 13th February 2006
quotequote all
I have domain admin rights and user manager etc but I am a bit of a noob

If i wanted to look back over the last few weeks and see what time people have been loggin on and off at work, can i do that easily?

BliarOut

72,863 posts

269 months

Monday 13th February 2006
quotequote all
Look in the security log in Event Viewer. If logging is enabled it'll all show in there. You will want to do a bit of filtering though! Depending on how far back you want to track things you might have to increase the log size and set it to overwrite old events for future monitoring.

hedders

Original Poster:

24,460 posts

277 months

Monday 13th February 2006
quotequote all
Ta for that, but that only shows what is going on on MY computer.

I am wondering if i can type a users name in some admin console or something and find out what they have been doing (what times they are working etc).

I just want to find out if I am working loads more hours than some of my counterparts, which i suspect I am

jamieboy

5,929 posts

259 months

Monday 13th February 2006
quotequote all
You need to look in the security event log on the domain controllers - bear in mind that the logon event will only be recorded on the DC that authenticated the user, so you'll need to check all the DCs in your domain.

hedders said:
I have domain admin rights but I am a bit of a noob

...this sentence scares me quite a lot.

BliarOut

72,863 posts

269 months

Monday 13th February 2006
quotequote all
Well try it on a domain controller then

hedders

Original Poster:

24,460 posts

277 months

Monday 13th February 2006
quotequote all
Oh well, it doesn't look like i can log onto the domain controller i need to...bum!

agent006

12,058 posts

294 months

Monday 13th February 2006
quotequote all
You may be dodgy ground if you need to use this sort of monitoring for disciplinary things and it's not in their contract and/or they're not aware of it.

slapmatt

1,132 posts

252 months

Monday 13th February 2006
quotequote all
If you go into Event Viewer on your own machine, you can right-click on Event Viewer and select "Connect to another computer...". Type in computer name of lazy toe rag and view their Security Log with impunity!

_DeeJay_

5,057 posts

284 months

Monday 13th February 2006
quotequote all
If it's a Windows 2003 domain in native mode, you can check their last login time by checking an attribute on their user account.

You cannot check logout time though, so it's a tad useless.

Do you have a security system to limit access to doors at work (as that may be a better option).

d

jamieboy

5,929 posts

259 months

Monday 13th February 2006
quotequote all
_DeeJay_ said:
If it's a Windows 2003 domain in native mode, you can check their last login time by checking an attribute on their user account.
...although I think the lastLogonTimestamp attribute is only replicated every 14 days, so if you've got more than one DC then you can't 100% rely on it being accurate.

maddog-uk

2,392 posts

276 months

Monday 13th February 2006
quotequote all
If you really need this sort of data you need a fully fledged security manager from someone like netiq to groom from muitliple sites and gather this information for someone with non privledged accounts. But I would not go down this route unless you need to comply with sarbanes oxley or financial regulators. You could write scripts to groom ad for this. But as someone says there are simply methods e.g door access systems and what if they dont log out etc.

hedders

Original Poster:

24,460 posts

277 months

Monday 13th February 2006
quotequote all
Ta for the tips everybody.

I only want to do this to satisfy my curiousity, I don't have any superiority over the people i want to check out, and I am not looking to drop anyone in it

ALso, they work in different buildings than i do, but doing the same thing.

I was hoping that there would just be a section of data somewhere that listed just the information i needed at the click of a mouse, you know, like in the movies