Question : How to setup an audit for logon and logoff for individual user(s)

Is there a way to audit logon and logoff times for individual users in Windows Enterprise Server 2003?  If so what steps can I follow to do so?  All PC's are Windows XP SP3.

Thank you for your help!

Answer : How to setup an audit for logon and logoff for individual user(s)

You’ll need to enable Audit Logon Events in group policy then you can use eventcombMT to filter the required events out of the event log (available as part of the following download )
http://www.microsoft.com/downloads/details.aspx?familyid=7af2e69c-91f3-4e63-8629-b999adde0b9e&displaylang=en

You’ll then have to audit the individual events (540, etc) Alternativley you may find it easier to do the following:
http://support.microsoft.com/kb/556015 (logon/logoff scripts)
Random Solutions  
 
programming4us programming4us