1

So I’ve been asked by operations to take a look at some users and figure out whether of not they’re working hours they claim they are. From what I’ve read and found out Windows security logs aren’t all that great at providing accurate information. I don’t want to get anyone fired if I don’t have a sure fire way of tracking this info. Does anyone know of a logging program that will monitor “active” time spent within windows? My users use their PCs while in the office and connected over VPN from home at times. If anyone has any recommendations/solutions please post below. Thanks in advance for your assistance fellow spiceheads!

7 Spice ups
2

You’ll need a keylogger to make sure they are actually doign network.

3

Not looking to go that far. I just want to know when the PC is activity being used while the user is logged in. So far this is the only thing I’ve found that looks beneficial: https://app.activtrak.com/

4

That takes screenshots, so isn’t all that different that a keylogger really.

It’s very, very hard to determine ‘active use’ on a PC. What if someone is reading something slowly? What if they’re just clicking around, but not really doing anything? Without watching what’s happening it’s next to impossible to be sure.

Something like Spector 360 or maybe that activtrak you linked (I’ve never heard of that one) will do what you need, but you’ll need to put some manual labor in also, to actually see what the users are doing.

2 Spice ups
5

I have Skype for Business on my PC, and it seems to know when I am busy, idle, or in a meeting. (Exchange calendar I am guessing for a meeting). Not sure if you can hook into and retrieve the busy/idle status every 15 seconds or so to build a log and find out busy/idle. But, then again, this is only for Lync/Skype for Business.

1 Spice up
6

Yeah I have spark and replaced skype in our environment. I’m not going to actively monitor anyone’s time myself though. That’s way too tedious.

7

Have a look at UserLock.

With UserLock you can both monitor and control users access time to the Windows Network.

Monitoring: Track easily all login and session events (in real-time) - across all session types (including PC, device, VPN, IIS). Get information by user, view all the sessions status opened by a user, from where they have logged in, since when etc. You can also view the last workstation on which the user logged off and the times etc. All this is recorded for reporting.

Control. You can set contextual access restrictions which include time/hours/days. This means you can restrict employees access to set working times if needed.

monitor-user-logon-logoff.png
monitor-user-logon-logoff.png800×500 126 KB

Hope this helps. Free 30Day full trial download available of course! Easy to install, easy to use!