Profile log in record

[Duzzy]

duzzy,
why I thank you for giving me permission to post my script.

Sorry didn't mean it like that, just thought you might not post until I got a response about mine or until he found out about having PowerShell.

 

[Antcs]

Nice work. Will need time to wrap my head around this. Did the log.bat file with instant results. Wil use somewhat over the weekend and post results. Thank you. @ Karlsnooks. I am going to lay off the power shellfirst. Not because i think it wont work but because it scares me. I will give it serious go if the other file does not do it for me. But, thank you so much for the effort.

 

[Antcs]

@Karlsnooks. I just could not wait. Gave powershell a go, just quick you see. Got instant results. Man that is freaky. Info is weird thought. Give me user logon times. not time. Wait I will post screenshot. Whats up with that. Am I doing it wrong. Probably. Late friday night. Time for bed. Thx

 

[karlsnooks]

I suspected that you might want more.

What that script shows you is the last time that the user(s) logged on and the total number of times they have logged on.

What it doesn't show is when a user logged off and the total number of hours that they were logged on.

For some of that info, the EventViewer can be useful, however, as you have seen, the clearing of the logs will eliminate past event log entries.

True is that with group policy you can restrict the use of EventViewer.

I suspect that your users don't have the slightest idea what event viewer is.

Although supposedly there is a "LogoffTime" property, the info doesn't seem to be there. Whether this is operator malfucntion or a "feature" of the netlogons is beyond my knowledge.

I seriously recommend visiting a couple of powershell and/or admin forums to see if someone there will, for no renumeration, write a script for you.

http://powershell.com
http://powershellcommunity.org
http://blogs.technet.com/heyscriptingguy

There are many more, I just don't have a convenient set of bookmarks for PowerShell-mostly just RSS feeds

 

[Duzzy]

If you run my batch file it will instantly create the files under C:\Logs that you can then view. If setup through Group Policy as a logon/logoff script it will be ran each time a user logs on or off and the info will be recorded in the log file.

One problem here is I don't know is WinXP Home has Group Policy so you might need WinXP Professional, although you might be able to use Task Scheduler.

Karlsnooks PowerShell script can also be converted to a VBScript file if your familer with that but it accesses the WMI Object Win32_NetworkLoginProfile and under both Win7 and Virtual PC's WinXP Mode the logoff time is returned as "LastLogoff: **************.******+***" making it invalid.

I could not find any WMI Object to return any info about logoff times. It's possible to retrieve this info from the EventViewer but I don't know how to script it to return the info you want in any scripting language but my skills are quite limited. Simply opening the EventViewer to view the info can also be a bit unappealing.

Also my script can be converted to VBScript if you have problems with the batch file but formatting the output may be a challange.

Like Karlsnooks said you can also ask on some scripting sites if you want to retrieve the info from Windows instead of generating it yourself.

If you choose to use my batch script then I can help with any formatting or changes you require.

 

[karlsnooks]

PowerShell is available also for XP. Simply a download away. Win 7 and Win 8 come with PowerShell.

I can not recommend strong enough visiting some of the PowerShell sites and also admin sites. PowerShell is the preferred scripting language by admins.

You might want to check www.petri.co.il/ for an admin site.

 

[Antcs]

I am sorry. I am really busy this side. Did not give this all the attention it needs. We have a long weekend coming up, Friday, Sat, Sun, Monday, and Tuesday. Bad for business but good for the lazy... I will attend to it then.