Phone Get Quote
US: +1 888 720 9500
US: +1 888 791 1189
Intl: +1 925 924 9500
Aus: +1 800 631 268
UK: 0800 028 6590
CN: +86 400 660 8680

Direct Inward Dialing: +1 408 916 9892


How to monitor employees' logon duration?

Review your employees' logon durations

Free, fully functional 30-day trial

  • With Native AD Auditing

  • With ADAudit Plus

ADAudit Plus is a comprehensive Active Directory auditing solution that will help you monitor, and keep a track of all logons, logoffs, and logon duration of your domain users with powerful and intuitive reports.

You can configure these reports to be automatically generated and emailed to you at specified intervals. You can also export these reports to a format of your choice. Here is how you can access the employee logon duration report using ADAudit Plus:

Login to ADAudit Plus → Go to the Reports tab → Under Local Logon-Logoff Reports → navigate to the Logon Duration report.

  • launch
    • The details you can get in this report are:
      1. Employee name
      2. Workstation name
      3. The logon or logoff times
      4. The computer or server in which the logon or logoff occurred
      5. The time at which the first logon occurred
      6. The logon duration
  • With this report, you can track the logon duration of your employees. This could in turn help you with making decisions about your business productivity.

With native auditing, here is how you can monitor employees' logon duration:

  • Step 1: Enable 'Audit logon events' policy
  • Launch Server Manager in your Windows Server instance.

  • Under Manage, select Group Policy Management and launch the Group Policy Management console.

  • Navigate to Forest --> Domain --> Your domain --> Domain Controllers.

  • Create a new GPO and link it to the domain containing the user object, or edit any existing GPO that is linked to the domain to open the Group Policy Management Editor.

  • Navigate to Computer Configuration -> Windows Settings -> Security Settings ->Local Policies -> Audit Policy.

  • Under Audit Policy, select Audit logon events and turn auditing on for both success and failure.

  • Step 2: Enable logon/logoff auditing
  • Now, navigate to Computer Configuration -> Windows Settings -> Security Settings ->Advanced Audit Policy Configuration -> Audit Policies -> Logon/Logoff.

  • Under Logon/Logoff, turn on auditing for 'Audit Logoff', and 'Audit Logon'.

  • Step 3: Track employees' logon duration in Event Viewer
  • Every time a user logs on, or logs off, an event log will be recorded in the Event Viewer. These event logs can be used to track employees' logon duration. To view these audit logs, go to the Event Viewer. Under Windows Logs, select Security. You can find all the audit logs in the middle pane as displayed below.

  • To filter the event logs to view just the logs associated with employee logon duration, select Filter Current Log from the right pane . Simply search for the event IDs 4624 (account was logged on) and 4647 (account was logged off). You can see who logged on, when they logged on, and when they logged off.

  • Using this information, you can compute a user's logon duration. You will need to repeat this multiple times if you want to monitor the logon duration of multiple users.

Native auditing becoming a little too much?

Simplify logon-logoff auditing and reporting with ADAudit Plus.

Get Your Free Trial Fully functional 30-day trial

Request 1-on-1 demo

  • -Select-
  • By clicking 'Submit' you agree to processing of personal data according to the Privacy Policy.


One of our solution experts will get in touch with you shortly.

ADAudit Plus Trusted By