Best way to log activity

Jonathanb · 26 Apr 2011

Hello everyone,

I'm starting to learn ICT and want to know how I can log the activity on a Windows 7 system. At this moment I made a simple script which will log the username, when he/she logged in/out and the ipconfig settings from that machine.

My school can log everything like what programs you started, installed, removed and more. This is what I'm trying to do but powershell doesn't do these sort of things as far as I can see.

Can someone help me out here? :)

---
JonathanB

Devux · 26 Apr 2011

The event log should give you all of the information that you're looking for, you're just going to have to sift through a lot of information you're not looking for.

Jonathanb · 27 Apr 2011

The event log has a lot of information and is where I will look first when there is a problem. Maybe I can filter the event log to show me only the things I need and put them in a txt file.

Thank you Devux for the fast reply!

Devux · 27 Apr 2011

Not a problem. To speed up your search through event viewer, the logons (successful or otherwise) will be logged under security, and IP Addresses will show up under system, assuming that your obtaining your IP through DHCP (from your ISP, router, or DHCP server)