Kaseya Community

Possible to find out how long a user has been logged into a machine?

This question has suggested answer(s)

We are trying to monitor which machines get use and which don't.  Is there a way to find out a break down of how long any user has been logged into a machine?  Such as 9 out of 24 hours someone was logged into this machine.

All Replies
  • This MSDN blog should point you in the right direction Big Smile.
    I think the best way to check this is to see the eventlogs.

    They are all found in the Security event log.  The pre-Vista events (ID=5xx) all have event source=Security.  The Vista/WS08 events (ID=4xxx) all have event source=Microsoft-Windows-Security-Auditing.

    528 / 4624  LOGON
    538 / 4634  LOGOFF
    N/A / 4800  WORKSTATION_LOCKED
    * / 4801    WORKSTATION_UNLOCKED
    N/A / 4802  SCREENSAVER_INVOKED
    N/A / 4803  SCREENSAVER_DISMISSED

    By checking these 5 types of events, you can see the logon/logof time, (un)locked workstation time and screensaver times.
    I checked my own security log, and unfortunately 4624 does show to much (rendering this suggestion useless).



    not a viable solution....
    [edited by: Walter van Eijk at 5:18 AM (GMT -7) on Jul 1, 2013]