Printable View
I was wondering if anyone knows how to find out when the last time a user logged on to the network. I've checked the PDC Security logs and they only go back 2 days. The last person that worked in Network Management had set the security logs to overwrite after 5056K thus the logs only hold 2 days worth of info. Is there any other way to find out when a user logged in last?
-the eeshman
If you have any other servers, you may want to check the logs of priveledge use on his/her home directory.
Also, if you have a mail server that keeps good logs (I have exchange), you can check the last time they used the mailbox.
The w2k Reskit (Nt reskit probably too) has a utility (script) called userstat if I remember right (the name) that lists the info you need....
Ammo
Thanks for the tips guys. Helped tremedously. I did end up using the exchange server information.
-the eeshman
w00t! hehehe...glad I could help. :)
If they have a roaming profile, you can check the last time their NTUser.dat file was modified or look at the lastlogon.ini file in thier profile path.
.-=Ken=-.
Yeah, I should have thought of that one too since we use roaming profiles. *yuck*
I'm trying to move away from them anymore, what a waste of server space and bandwidth.
Good post Ken!
Thanks - I like to help where I can.
.-=Ken=-.
Roaming profiles are good but you don't always need em..Quote:
Originally posted here by jezter6
Yeah, I should have thought of that one too since we use roaming profiles. *yuck*
I'm trying to move away from them anymore, what a waste of server space and bandwidth.
(BTW, W2K profile syncrhonization algos are greatly improvide compared to NT4's)
Ammo
don't speak! I wang hacking your computer!
It would be ok, but the people I work with....
Let's just say someone had 61 personal folders in Outlook, all in the profile, 2 GB total space, downloaded each and every morning at logon.
A- Restrict the maximum size of the profiles (prevent loggof if profile size is to big)
B- Move redirect their MyDocuments and etc to their network home directory...
C- Put disk quotas on the server..
Ammo
Question 1) Where can I limit max size of profiles? I checked user manager, but didn't seem to find anything useful.
I dont' want to prevent logoff...as that poses a major security risk (they'll just go home and leave the PC on).
Answer 2) I do that, but when profiles get hosed up and we recreate them, that's the last thing I really worry about doing.
Answer 3) Not a bad idea, I've done that to home directories, but not profiles. We're going to be getting all new PC's for the network in january, so I'm just going to delete roaming profiles for 85-90% of my users.
rofl...just go through and delete them all then say "it must be a system bug". most likely everybody will believe it. the problem is that you will have to deal with 85-90% of your users calling you multiple times asking "what happened" and "can i get it back" multiple times a day.Quote:
Originally posted here by jezter6
Answer 3) Not a bad idea, I've done that to home directories, but not profiles. We're going to be getting all new PC's for the network in january, so I'm just going to delete roaming profiles for 85-90% of my users.
I get so tired of "can I get that bacK" questions.
"I deleted a file from my home directory, can I get that back?"
- Yes, but if you make me waste a half hour recovering the digital picture of your desk ONE MORE TIME just because you want it as your background, I'm going to burn all of my backup tapes.
"I deleted a file from my 'Deleted Items' folder in Outlook, can I get that back?"
- No, if you were dumb enough to PUT it in the deleted items folder, and you were again dumb enough to empty it, good for you. I hope you put the only copy of the email from your boss that said you were a genius in there, because you know what...we're all tired of seeing it open on your desktop when we walk by.