how can i check login logout times

[WINTERLORD]

was wondering how I can check the system file for login times when the computer was signed onto windows desktop in event viewer

 

[johnbl]

You can create a script that runs at logon and logoff
Look at the entry with the simple script
http://answers.microsoft.com/en-us/windows/forum/windows_7-security/how-do-i-view-login-history-for-my-pc-using/a0172887-1071-47fb-b0a3-6ca9360efdbf

You might look at tools that already try to solve the problem.
Maybe winlogonview
http://www.nirsoft.net/utils/windows_log_on_times_view.html

 

[WINTERLORD]

does that tool need to be installed before the events you want to view or can do anytime?

 

[johnbl]

I ran it and it shows logons but not the logoff
I think that is why people at there own logon and logoff scripts and just append a message to a log file with a batch file that they control.

here is a old method: http://blogs.msmvps.com/kwsupport/2005/02/24/lazy-mans-way-to-track-user-logonlogoff/

--------------
I would think now you would use taskscheduler (Taskschd.msc ) and set up a script to run on some logon and logoff event.
here is someone that made a simple version:
http://www.guidingtech.com/6068/track-work-time-login-lock-task-schedule/

it logs a single users login, lock and logout times. (I would add the username to the script to prevent potential errors)

I am sure there are more professional ways to do this with a VB script or even better a windows powershell script.
It depends on how your network is setup and how many potential users you want to track and on how many machines.
see this for example:
https://social.technet.microsoft.com/Forums/office/en-US/4f6815f1-2998-484c-a423-fe6507f1548c/powershell-script-to-fetch-logonlogoff-user-on-particular-server-getwinevent-geteventlog?forum=winserverpowershell

does that tool need to be installed before the events you want to view or can do anytime?

 

[WINTERLORD]

I can try but I don't know much bout scripts. I was thinking maybe the event viewer in windows would log that stuff or show