Quantcast
Channel: THWACK: Message List - Security Event Manager (SEM) - Formerly Log & Event Manager
Viewing all articles
Browse latest Browse all 5385

Re: How can I pull a report on one user logging in and out

$
0
0

First of, it is best to capture this activity on the user machine itself since the domain controller will only log the authenticated access but not the logout.

 

Next, Create a Event Group from BUILD > Groups for the UserLogon and UserLogoff events.

Go to nDepth, select the Event Group from the options on the left, choose the time frame and click play (blue triangle). this will show the results for all users.

Under the 'Refine search', find your user and and double click on it, and click Play. And you should have the results you are looking for.

 

You can also use the Gear icon above the time selection drop down to Save the search to readily load the search criteria at a later date


Viewing all articles
Browse latest Browse all 5385

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>