Detecting NT Network Logins

[Scott Turchin]

That had the code, thanks I'll modify it and post it when I'm done...this ought to be good...


Scott


------------------
Scott
mailto:[email protected][email protected]</A>

Scott,

I don't know if you know this link already, but it has a lot
of vb code for NT networking. Maybe you can use it:
http://www.netfokus.dk/vbadmincode/



------------------

[Scott Turchin]

It's a good thought, but I would have to programmatically turn it on, and it appears it's NOT a registry entry, but the last modified file was NETLOGON.CHG and I don't know the format of that binary file.

In addition, monitoring the event log would use an enourmous amount of user system resources...

So I guess I will omit that feature, since it is already in NT (Success and/or failure auditing)...

Was merely thinking about adding it to Winlog 2000...


thanks, that actually settles the issue for me...


Scott


------------------
Scott
mailto:[email protected][email protected]</A>

[Troy King]

Scott, maybe you could turn on the NT security feature in User Mangler that will log logons to the event log, and all you would have to do is monitor the event log... I don't have code for event log monitoring, but I wanted to at least offer an alternative approach.

------------------
Troy King
[email protected]

[Scott Turchin]

I'm thinking 403_Server_info?

sv403_sessopens AS DWORD '


How would one detect when a user logs in via the network so that I can write it to a log...??


Thanks,

Scott


------------------
Scott
mailto:[email protected][email protected]</A>