User Device Tracker (UDT)

Forum UDT - User Logoff Events

State Not Answered
Locked Locked
Replies 1 reply
Subscribers 24 subscribers
Views 933 views
Users 0 members are here

Options

Related

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

UDT - User Logoff Events

lufffunk over 1 year ago

Does anyone know if there is a way to capture a user logoff event?

We want to be able to audit the length of time a user is logged into a system.

Thanks

Top Replies

donrobert5 over 1 year ago +6

By default, UDT supports Kerberos authentication scheme only. Authentication Operating System Event Code Kerberos Windows 2003 672 and 673 NTLM …

0 donrobert5 over 1 year ago

By default, UDT supports Kerberos authentication scheme only.

Authentication	Operating System	Event Code
Kerberos	Windows 2003	672 and 673
NTLM	Windows 2003	680
Kerberos	Windows 2008 and later	4768 and 4769
NTLM	Windows 2008	4776

I don't think it logs the log off.

https://support.solarwinds.com/SuccessCenter/s/article/Not-receiving-user-data-from-domain-controllers-and-validating-active-directory-in-UDT?language=en_US

It would be a great Feature Request though.

SolarWinds solutions are rooted in our deep connection to our user base in the THWACK^® online community. More than 190,000 members are here to solve problems, share technology and best practices, and directly contribute to our product development process.