« Previous Next »

Thread: Logon/Logoff week information

Last post 12-22-2008 10:15 PM by Hitchheik. 3 replies.

Average Rating Rate It (5)

RSS

Page 1 of 1 (4 items)

Sort Posts:

  • 12-15-2008, 4:41 AM

    Logon/Logoff week information

    I need information unsuccessful logon week after per day and week diagram of unsuccessful logons.

    How this is possible to create?

  • 12-15-2008, 9:17 AM In reply to

    Re: Logon/Logoff week information

    How are you logging in?  If Windows, you'll need to audit unsuccessful logins then use LogParser to parse the Security Event Log.

    Jeff

    Look for Wrox's new book Professional IIS 7 in your local bookstore, or order now at Amazon.com
  • 12-16-2008, 5:00 AM In reply to

    Re: Logon/Logoff week information

     I have defined login auditing for successful and unsuccessful logons.

  • 12-22-2008, 10:15 PM In reply to

    Re: Logon/Logoff week information

     This is how to see logon/logoff on your computer. Save as LogonLogoff.vbs

    '*******************************

    Set objLogParser = CreateObject("MSUtil.LogQuery")
    Set objInputFormat = CreateObject("MSUtil.LogQuery.EventLogInputFormat")
    Set objOutputFormat = CreateObject("MSUtil.LogQuery.DatagridOutputFormat")

    strQuery = "SELECT ComputerName, TimeGenerated AS LogonTime, STRCAT(STRCAT(EXTRACT_TOKEN(Strings, 1, '|'), '\\'), EXTRACT_TOKEN(Strings, 0, '|')) AS Username FROM Security WHERE EventID IN (552; 528) AND EventCategoryName = 'Logon/Logoff'"
    objLogParser.ExecuteBatch strQuery, objInputFormat, objOutputFormat

     

    '********************

    Jerome

     

Page 1 of 1 (4 items)
Microsoft Communities