Login & Logoff History AD

Check User Login & Logoff History in Windows Active Directory

Steps to check the users Login and logoff history

Create a Folder in C Directory

Shared this folder to authenticated

Example Like LogData

Have Shared Logdata folder with Authenticated users

Now need to create login and logoff script files

Like example:

Open any text editor like notepad or notepad++

Login.bat file — saving file extension will be .bat (windows Batch file)

Echo %Computername% %username% %date% %time% >>\\WindowsServerName\Logdata\login.txt

// so, my Windows server name is central just mention the name and save it.

Echo %Computername% %username% %date% %time% >>\\CENTRAL\Logdata\login.txt


Echo %Computername% %username% %date% %time% >>\\CENTRAL\Logdata\logoff.txt

Save it .bat script extension

Now create Group Policy for user’s login and logoff history.

Right click on local domain and creating new GPO

Edit Group policy

Users Configuration-> Policies ->windows settings-> Script(Logon/Logoff)

Click to Properties and click to add

Click on Browser and type the login.bat script

Now select logoff and click to Browse the Logoff script file.

Now need to update the group policy.

Open CMD Prompt

Run gpupdate /force

Login and logoff the Domain Controller users

In same directory logdata there will be create two files

Login.txt and logoff.txt –logon users and logoff users’ detail in text files.

Login Users History

Logoff Users History

Leave a Reply

Your email address will not be published. Required fields are marked *