Does anyone know of an app that will record a timestamp every time someone logs in?

---

Request for Question Clarification by denco-ga on 18 Aug 2005 18:39 PDT

Howdy russellz-ga,

It would help researchers to know which operating system is being run,
and what application the person is "logging on," that is, the computer
itself, getting on the Internet, picking up email, etc.

The more details, the better. Thanks!

Looking Forward, denco-ga - Google Answers Researcher

---

Clarification of Question by russellz-ga on 18 Aug 2005 19:36 PDT

Windows XP.  I'm talking about logging into windows.

Check in the under security and turn on logging on success , it will
show each and every login as follows

Primary User Name:	SYSTEM
Primary Domain:	NT AUTHORITY
Primary Logon ID:	(<ID>)
Client User Name:	<username>
Client Domain:	         <Domain>
Date : 
Time :

Err "check in the administrative tools in the event log under security
" was what it should have said there

Can some kind of alert (preferably email) be sent when a login occurs?  Thanks!

Not with some sort of external program that can read the logs
(IPSentry is one of those and it is relatively cheap approx 100 bucks
for a single server license)

Dear friend,
if you dont mind doing a little programming, you could accomplish this
very easy with a perl script.
1st.. go to www.activestate.com and download ActivePerl for Windows
XP. The last time I did it, it was free. Then you d/c on the download
to install the ActivePerl environment. Then you can program in perl.
2nd.. When you write the Perl script, all it has to do is
   1. Open a LOGFILE in Append mode.
   2. Do the TIMESTAMP function to get current date/time
   3. Write the User ID and TIMESTAMP value to the LOGFILE in append mode
   3. Close the LOGFILE
3rd.. After debugging the script, you add it to the 'startup" of Windows so
that it runs every time anybody logs in.
Then, on a regulat basis, go in, make a copy of the LOGFILE, delete
the old one, and create a blank new one to start over.

The way I use to do it is...

go to 

Control Panel --> Administrative Tools --> Local Security Policy -->
Local Policies --> Audit Policy --> double click on Audit Account
logon events --> put success. Now, everytime someone logs in, it can
be viewed in ...

Control Panel --> Administrative Tools --> Event Viewer --> In either
Security or System. Make sure to "Clear all events" from each by right
clicking on each, it is probably filled with other things. It keeps
tracks of major events in computer.

Please let me know if that doesn't work for you.

-Haszan