Phone Live Chat
US: +1 888 720 9500
US: +1 800 443 6694
Intl: +1 925 924 9500
Aus: +1 800 631 268
UK: 0800 028 6590
CN: +86 400 660 8680


Windows Workstation Auditing

The demanding nature of User Workstations Auditing arises from the need of a secure corporate network environment. The user actions monitored, audited and reported by ADAudit Plus on the corporate network are 'Logon Duration', 'Logon Failures', 'Logon History', 'Terminal Services Activity', and 'Users Logon Duration on Computers'. Now, Administrators can view the exact time of User Workstation Logon & Logoff time along with the Logon Duration. This critical data is at the utmost ease to view in the event of unauthorized entry or regular monitoring. Reports can be scheduled and also be monitored with ADAudit Plus 'One View' Dashboard, which allows for critical reports based on Domains to be viewed as Graphical Reports / Summary View along with the related Alerts. Instant email alerts are sent to configured addresses in case of unauthorized / critical user activity in the Windows Active Directory Environment.

Windows User Workstation Audit Highlights

  • Track Users' Workstation Logon / Logoff.
  • Monitor activities by Admin, Helpdesk, HR etc.
  • Single view of all critical audit data for configured domains.
  • Set email alerts for critical accounts, unauthorized access.
  • Logins for IT Auditors with reports view only.
  • Archive AD event data for Security and Forensics.
  • Meet SOX, GLBA, PCI, FISMA, HIPAA Compliance.
  • Submit audit reports as XLS, CSV, PDF and HTML.
Dashboard View of Windows Workstations Auditing
Dashboard View of
Windows Workstations Auditing

Exhaustive Pre-Configured Reports and Email Alerts

'Select & View-Export the Reports', the easy-to-view pre-configured reports help in monitoring the user actions in Windows network workstations. The 20+ filter attributes help to easily pin point details in the thorough reports. Easily switch configured Domains / Period of reports. Also, schedule periodic email reports to XLS, HTML, PDF and CSV formats for corporate network analysis and IT Compliance!

Alert Profile via Email

ADAudit Plus further unburdens the administrator's call of duty with 'Email Alerts'. When a change / unauthorized access are logged, an email notification is sent, enabling the administrator to take immediate action. Alert Profiles are preconfigured and vigilant upon installation. Severity based custom alerts can be set for events in the Report profile.

Pre-Configured Windows Workstation Auditing Reports

Key Benefits of the User Workstations change audit reports

Currently Logged On Users Report

Currently Logged On Users Report

Be up-to-date on the number of users logged into the Domain. Select the filter attributes and acquire the detailed information for a crisp event reporting.

Logon Duration Report

By tracking Workstation Logon events on servers, you know when every session was logged in and now with Logoff event auditing, ADAudit Plus provides accurate information on the exit timing.

Logon Duration Report
Local Logon Failures

Local Logon Failures

Workstation logon failure highlights the unauthorized entry at the initial stage itself. Know the Username, IP address, Logon type- Remote Logon / Interactive Logon and many more filter attributes.

Logon History Report

Logon History Report sheds light on every event's success / failure instances specifying the logon failure type by the users, thus allowing the administrator to make sure there are no repeated unauthorized / suspicious logon events.

Logon History Report
Terminal Services Activity Report

Terminal Services Activity Report

Terminal Services Activity Report monitors the Remote Desktop Services activity. Monitor Terminal Services Activity with vital information of the source computer, client IP Address, access history; from among a list of attributes thoroughly scrutinizing the events logged.

Users Logon Duration on Computers

Know the critical 'Users' logon duration on computers. In the event of unauthorized access, this report helps to distinguish a computer usage based on user access at the time of event.

Users Logon Duration on Computers
Terminated Users Session

Terminated Users Session

Remote Interactive Services (Terminal Services, Remote Desktop or Remote Assistance) creates opportunities for misuse if, the user does not 'logout of the session' by clicking the logout button. The report highlights the exact 'terminated' time (even if the user just closes the session window).

This Windows Active Directory Workstations audit feature is available as an Add-On.
Other features

Active Directory Audit and Compliance

Auditing Active Directory changes helps organizations to be compliant with regulatory requirements. Learn how ADAudit Plus change audit software can help with data on security audits.

Audit User Management Actions

Keep tabs on what your users do. Study recent changes done by them. Maintain accountable / historical data of user and administrator actions.

Windows File Server Auditing in Microsoft Server Environment

Centrally Track-Audit-Secure the Windows File Server files; securely monitor and report the authorized / unauthorized document access, file/folder structure changes, shares and access permissions.

Schedule Active Directory change reports

Schedule event log data extraction, view them as reports on the ADAudit Plus web interface, also configure them to be emailed to specified users at desired times.

Track User Logon Actions

Audit and monitor logon actions of users including logon hours, peak logon times and more. ADAudit Plus reports facilitate effective monitoring / tracking of user logon.

Active Directory Auditing and Reporting trusted by

A single pane of glass for complete Active Directory Auditing and Reporting