How to trace user logging in from where

Speedyturtle · Guest

Does anyone know if there is a third party tool we can trace who logs in from
where? Ideally it can be a table with username and workstation name so we can
trace.

I have seen some admins putting login script to do that but cannot locate a
copy of the scripts.

Any help is appreciated.
Thanks.

Jorge.Mederos · Guest

I like to use script written using AutoIt. I have a script that runs as a
login script and captures information such as logon server, workstation name,
IP address, userid. The information is written to a text file on a shared
folder.

visit http://www.autoitscript.com/

Here is my script written in version 3:

$file = FileOpen("\\SERVERNAME\SHARENAME\LOGINUSER.TXT", 1)
If $file = -1 Then
Exit
EndIf

FileWrite($file, @MON)
FileWrite($file, "/")
FileWrite($file, @MDAY)
FileWrite($file, "/")
FileWrite($file, @YEAR)
FileWrite($file, ",")
FileWrite($file, @HOUR)
FileWrite($file, ":")
FileWrite($file, @MIN)
FileWrite($file, ":")
FileWrite($file, @SEC)
FileWrite($file, ",")
FileWrite($file, @LOGONDOMAIN)
FileWrite($file, ",")
FileWrite($file, @LOGONSERVER)
FileWrite($file, ",")
FileWrite($file, @COMPUTERNAME)
FileWrite($file, ",")
FileWrite($file, @IPADDRESS1)
FileWrite($file, ",")
FileWrite($file, @USERNAME)
FileWrite($file, @CRLF)
FileClose($file)

"Speedyturtle" wrote: