[junale]

We have Windows 2000 Server and need a possibility to log the user-logon-times. I can't find it anywhere but remember that "there was sth like that"...

Thanks in advance,
JunAle

[DiscardME]

Logons are logged at the authenticating domain controller in the security event log. There are options in Group Policy to enable the specific events you want logged. Computer Configuration - Windows Settings - Security Settings - Local Policies - Audit Policies.

Look for events 540 and 576 for successful logins.

This can be auditied either from the DC or from the local machine. Either way - you just need to enable auditing.

If you go to Microsoft Technet, you can run a search on it, or you can always use google to find step by steps.

Hope that points you in the right direction

[/\/\o\/\/]

the AD-user also has a LastLogonTime property,

but be aware that this is recorded seperate at each DC hence you have to check all domaincontrollers to get the last logontime.

gr /\/\o\/\/