Monitoring Network Logins

Submitted by Daniel Starnes on Wed, 04/30/2008 - 4:30pm.

   The recent survey about computer labs got me to thinking.  I would like to be able to keep track of how many students are using the lab each day, and how long they are logged on.  I would think it would be fairly simple to track when someone logged on, when they logged off, and what computer they were on.  Does anyone know of software that will do this on a Windows 2003 server?

Daniel Starnes
Student Computer Lab &
Network Technician
California Western School of Law

( categories: teknoids )
Submitted by mperna on Thu, 05/08/2008 - 10:30am.

Dan I was really going down the route of enabling
the audit process. And then reviewing event logs to see what is happening.
Unfortunately I see that exporting a CSV doesn’t really format in excel
in a useful way.

 

SO I thought of a different way that may
get better results. How about writing a simple logon script that will write the
username variable and date variable to a text file with the name of the text
file.

 

Such as this

 

echo off

if exist i:\aruserfiles\%username%.txt
goto end

echo hello >>
i:\aruserfiles\%username%.txt

echo %username%, %date% >>
i:\ARUSRLST.txt

:end

 

I do not have the computer name variable
in there but you can add it.   The script does 2 things it creates a
text file in a folder called aruserfiles on a previously mapped drive with the
student’s name. It then appends to a txt file called arusrlist.txt the username
and the date.  This file can then be imported into an excel type program
to do data mining. The If statement makes sure they do not run it twice, in
your case you may want to remove that so you can see every time they log on.
This script can be used in reverse to monitor log off as well to see how long
they spent on the lab pc. Look up script variables, I believe you can add a
time variable to this as well.

 

So far it works great; I used this method
to determine if students ran a specific reg fix I needed to apply.

 

Any other q’s you can email me
directly.

 

Hope it helps.

 

Matthew Perna

Network Administrator

Touro Law Center

225 East View Drive

Central Islip NY  11722

 

Email: Mperna@tourolaw.edu

Phone: 631-761-7072

Cell:     631-708-6418

 

Support: IT@tourolaw.edu

Phone: 631-761-7070

From:
teknoids-bounces@ruckus.law.cornell.edu
[mailto:teknoids-bounces@ruckus.law.cornell.edu] On Behalf Of Starnes, Daniel
Sent: Thursday, May 08, 2008 11:34
AM
To: Teknoids
Subject: Re: [teknoids] Monitoring
Network Logins

 

What do you use to
automate the process?  How do you get the data from all the logs together
into one file where you can mine the data?

-----Original Message-----
From: "Matthew Perna"
<MPerna@tourolaw.edu>
Sent 5/1/2008 5:43:32 AM
To: "Teknoids" <teknoids@ruckus.law.cornell.edu>
Subject: RE: [teknoids] Monitoring Network Logins

Dan you can use Group policies to set the
audit option on those computers. Then by reviewing the Security logs in event
viewer you will be able to see when users log on and log off. You can export
the log file as a csv and manipulate it in Excel to get the data you need.

 

Good luck! Hope this helps.

 

Matthew Perna

Network Administrator

Touro Law
Center

225 East View Drive

Central Islip NY 
11722

 

Email: Mperna@tourolaw.edu

Phone: 631-761-7072

Cell:     631-708-6418

 

Support: IT@tourolaw.edu

Phone: 631-761-7070

From: teknoids-bounces@ruckus.law.cornell.edu
[mailto:teknoids-bounces@ruckus.law.cornell.edu] On Behalf Of Starnes,
Daniel
Sent:
Wednesday, April 30, 2008 6:29 PM
To:
Teknoids
Subject:
[teknoids] Monitoring Network Logins

 

   The recent
survey about computer labs got me to thinking.  I would like to be able to
keep track of how many students are using the lab each day, and how long they
are logged on.  I would think it would be fairly simple to track when
someone logged on, when they logged off, and what computer they were on. 
Does anyone know of software that will do this on a Windows 2003 server?

Daniel
Starnes
Student Computer Lab &
Network Technician
California Western School of Law

_______________________________________________You are currently subscribed to teknoids as: dstarnes@law.cwsl.edu.To unsubscribe send a blank email to teknoids-leave@ruckus.law.cornell.edu--See the web interface at href="http://ruckus.law.cornell.edu/mailman/listinfo/teknoids" target="_blank">http://ruckus.law.cornell.edu/mailman/listinfo/teknoids to get your list password, unsubscribe, and view your list settings.