Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

UDT - User Logoff Events

Does anyone know if there is a way to capture a user logoff event?

We want to be able to audit the length of time a user is logged into a system.

Thanks

Find more posts tagged with

logoff

udt

Accepted answers

All comments

By default, UDT supports Kerberos authentication scheme only.

Authentication	Operating System	Event Code
Kerberos	Windows 2003	672 and 673
NTLM	Windows 2003	680
Kerberos	Windows 2008 and later	4768 and 4769
NTLM	Windows 2008	4776

I don't think it logs the log off.

https://support.solarwinds.com/SuccessCenter/s/article/Not-receiving-user-data-from-domain-controllers-and-validating-active-directory-in-UDT?language=en_US

It would be a great Feature Request though.

Quick Links