Direct Inward Dialing: +1 408 916 9892
ADAudit Plus is a comprehensive Active Directory auditing solution that will help you monitor, and keep a track of all logons, logoffs, and logon duration of your domain users with powerful and intuitive reports.
You can configure these reports to be automatically generated and emailed to you at specified intervals. You can also export these reports to a format of your choice. Here is how you can access the employee logon duration report using ADAudit Plus:
Login to ADAudit Plus → Go to the Reports tab → Under Local Logon-Logoff Reports → navigate to the Logon Duration report.
With this report, you can track the logon duration of your employees. This could in turn help you with making decisions about your business productivity.
With native auditing, here is how you can monitor employees' logon duration:
Launch Server Manager in your Windows Server instance.
Under Manage, select Group Policy Management and launch the Group Policy Management console.
Navigate to Forest --> Domain --> Your domain --> Domain Controllers.
Create a new GPO and link it to the domain containing the user object, or edit any existing GPO that is linked to the domain to open the Group Policy Management Editor.
Navigate to Computer Configuration -> Windows Settings -> Security Settings ->Local Policies -> Audit Policy.
Under Audit Policy, select Audit logon events and turn auditing on for both success and failure.
Now, navigate to Computer Configuration -> Windows Settings -> Security Settings ->Advanced Audit Policy Configuration -> Audit Policies -> Logon/Logoff.
Under Logon/Logoff, turn on auditing for 'Audit Logoff', and 'Audit Logon'.
Every time a user logs on, or logs off, an event log will be recorded in the Event Viewer. These event logs can be used to track employees' logon duration. To view these audit logs, go to the Event Viewer. Under Windows Logs, select Security. You can find all the audit logs in the middle pane as displayed below.
To filter the event logs to view just the logs associated with employee logon duration, select Filter Current Log from the right pane . Simply search for the event IDs 4624 (account was logged on) and 4647 (account was logged off). You can see who logged on, when they logged on, and when they logged off.
Using this information, you can compute a user's logon duration. You will need to repeat this multiple times if you want to monitor the logon duration of multiple users.
Native auditing becoming a little too much?
Simplify logon-logoff auditing and reporting with ADAudit Plus.
Get Your Free Trial Fully functional 30-day trial
