Profile log in record

karlsnooks said:

duzzy,
why I thank you for giving me permission to post my script.

Sorry didn't mean it like that, just thought you might not post until I got a response about mine or until he found out about having PowerShell.

I suspected that you might want more.

What that script shows you is the last time that the user(s) logged on and the total number of times they have logged on.

What it doesn't show is when a user logged off and the total number of hours that they were logged on.

For some of that info, the EventViewer can be useful, however, as you have seen, the clearing of the logs will eliminate past event log entries.

True is that with group policy you can restrict the use of EventViewer.

I suspect that your users don't have the slightest idea what event viewer is.

Although supposedly there is a "LogoffTime" property, the info doesn't seem to be there. Whether this is operator malfucntion or a "feature" of the netlogons is beyond my knowledge.

I seriously recommend visiting a couple of powershell and/or admin forums to see if someone there will, for no renumeration, write a script for you.

http://powershell.com
http://powershellcommunity.org
http://blogs.technet.com/heyscriptingguy

There are many more, I just don't have a convenient set of bookmarks for PowerShell-mostly just RSS feeds

If you run my batch file it will instantly create the files under C:\Logs that you can then view. If setup through Group Policy as a logon/logoff script it will be ran each time a user logs on or off and the info will be recorded in the log file.

One problem here is I don't know is WinXP Home has Group Policy so you might need WinXP Professional, although you might be able to use Task Scheduler.

Karlsnooks PowerShell script can also be converted to a VBScript file if your familer with that but it accesses the WMI Object Win32_NetworkLoginProfile and under both Win7 and Virtual PC's WinXP Mode the logoff time is returned as "LastLogoff: **************.******+***" making it invalid.

I could not find any WMI Object to return any info about logoff times. It's possible to retrieve this info from the EventViewer but I don't know how to script it to return the info you want in any scripting language but my skills are quite limited. Simply opening the EventViewer to view the info can also be a bit unappealing.

Also my script can be converted to VBScript if you have problems with the batch file but formatting the output may be a challange.

Like Karlsnooks said you can also ask on some scripting sites if you want to retrieve the info from Windows instead of generating it yourself.

If you choose to use my batch script then I can help with any formatting or changes you require.

PowerShell is available also for XP. Simply a download away. Win 7 and Win 8 come with PowerShell.

I can not recommend strong enough visiting some of the PowerShell sites and also admin sites. PowerShell is the preferred scripting language by admins.

You might want to check www.petri.co.il/ for an admin site.