Using Windows Auditing to track user activity | Peter Gubarevich<\/a><\/p>\nTalks about using Audit Policies, which can be pushed out per Windows PC or via GPO. You can do more than just track login/logout activity. Maybe set it up to check access to the folder where Outlook is run or something obvious like that?<\/p>\n<\/blockquote>\n<\/aside>\n
The problem I see with any kind of computer logging is that the user can say something like “Oh, I was working on filing” or anything else that would keep them away from their PC.<\/p>\n<\/blockquote>\n<\/aside>\n
Agreed. What I recommended is only PC related. Anything outside that scope would be an HR/management issue IMO… not something the IT dept is likely to be involved with unless they want to install a video monitoring system or something like that.<\/p>","upvoteCount":0,"datePublished":"2014-02-19T17:51:57.000Z","url":"https://community.spiceworks.com/t/need-help-tracking-a-users-inactivity/278687/7","author":{"@type":"Person","name":"dmc1981","url":"https://community.spiceworks.com/u/dmc1981"}},{"@type":"Answer","text":"
I didn’t try, but you could try o create a batch file, which will take the date and hour when the script is launch.<\/p>\n
Then, with the task scheduler, you could create a task, which will launch the batch file when the computer is locked and unlocked.<\/p>\n
You can do this like that in powershell:<\/p>\n
get-date >> c:\\yourfile.txt<\/p>\n
Don\"t forget to do manually on the workstation:<\/p>\n
set-executionpolicy unrestricted<\/p>\n
(and put it at restricted again when your are done with your monitoring)<\/p>\n
EDIT: Tested, and worked perfectly. it give you the time when it got locked, and the time when it got unlocked.<\/p>\n
If you need help to create the task, do not hesitate. I joined the script in attach file.<\/p>\n
EDIT2: you must put a gpo which lock session after 5minutes(or else) of inactivity, otherwise it wont work…<\/p>","upvoteCount":2,"datePublished":"2014-02-19T18:04:40.000Z","url":"https://community.spiceworks.com/t/need-help-tracking-a-users-inactivity/278687/8","author":{"@type":"Person","name":"micadam","url":"https://community.spiceworks.com/u/micadam"}},{"@type":"Answer","text":"
And if they do not log off of their computer then what? And if the end user is really smart they will set up a scheduled task to log themselves off at 5:00<\/p>","upvoteCount":1,"datePublished":"2014-02-19T18:15:57.000Z","url":"https://community.spiceworks.com/t/need-help-tracking-a-users-inactivity/278687/9","author":{"@type":"Person","name":"rockn","url":"https://community.spiceworks.com/u/rockn"}},{"@type":"Answer","text":"
I have had similar requests, and my answer is always that it isn’t a problem IT can solve. Good luck!<\/p>","upvoteCount":3,"datePublished":"2014-02-19T18:26:37.000Z","url":"https://community.spiceworks.com/t/need-help-tracking-a-users-inactivity/278687/11","author":{"@type":"Person","name":"john1858","url":"https://community.spiceworks.com/u/john1858"}},{"@type":"Answer","text":"
better idea than my previous, in task manager, there is a trigger for inactivity.<\/p>\n
You can use it to launch the script every 15minute of inactivity, like that you’ll see when the employee is not working for 15 minutes.<\/p>","upvoteCount":1,"datePublished":"2014-02-19T18:44:02.000Z","url":"https://community.spiceworks.com/t/need-help-tracking-a-users-inactivity/278687/12","author":{"@type":"Person","name":"micadam","url":"https://community.spiceworks.com/u/micadam"}},{"@type":"Answer","text":"
Have you thought about physical seat monitoring? We are doing some testing for a few companies that monitor activities of their employees… just a side thought.<\/p>","upvoteCount":0,"datePublished":"2014-02-19T18:55:25.000Z","url":"https://community.spiceworks.com/t/need-help-tracking-a-users-inactivity/278687/13","author":{"@type":"Person","name":"dan4049","url":"https://community.spiceworks.com/u/dan4049"}},{"@type":"Answer","text":"\n\n
<\/div>\n
LuisJC:<\/div>\n
\n… keylogger software, webcam?? …<\/p>\n<\/blockquote>\n<\/aside>\n
Legal minefield, that is way to close to invasion of privacy.<\/p>\n
(IIRC people snooping webcams have gone to jail for it.)<\/p>\n
I agree with the above posters, attendance should be verified by HR.<\/p>\n
There are plenty of non technological ways to determine if someone is at their desk. Normally it would involve someone from HR getting off their 4$$ and going to look!<\/p>","upvoteCount":5,"datePublished":"2014-02-19T18:57:23.000Z","url":"https://community.spiceworks.com/t/need-help-tracking-a-users-inactivity/278687/14","author":{"@type":"Person","name":"mhunt","url":"https://community.spiceworks.com/u/mhunt"}},{"@type":"Answer","text":"\n\n
<\/div>\n
John2916:<\/div>\n
\nI have had similar requests, and my answer is always that it isn’t a problem IT can solve. Good luck!<\/p>\n<\/blockquote>\n<\/aside>\n
It is a Human Resources problem. But that doesn’t mean that it is a problem that IT can’t help solve. Billing is a function of accounting, but that doesn’t mean that IT can’t help make the task more efficient.<\/p>","upvoteCount":8,"datePublished":"2014-02-19T18:57:46.000Z","url":"https://community.spiceworks.com/t/need-help-tracking-a-users-inactivity/278687/15","author":{"@type":"Person","name":"jack-veriato","url":"https://community.spiceworks.com/u/jack-veriato"}},{"@type":"Answer","text":"
It is only a problem IT can help solve if requested to do so by HR, not this person’s manager.<\/p>","upvoteCount":3,"datePublished":"2014-02-19T19:00:39.000Z","url":"https://community.spiceworks.com/t/need-help-tracking-a-users-inactivity/278687/16","author":{"@type":"Person","name":"rockn","url":"https://community.spiceworks.com/u/rockn"}},{"@type":"Answer","text":"
Old school – physical time clock. <\/p>","upvoteCount":8,"datePublished":"2014-02-19T19:05:33.000Z","url":"https://community.spiceworks.com/t/need-help-tracking-a-users-inactivity/278687/17","author":{"@type":"Person","name":"trevorbrown8801","url":"https://community.spiceworks.com/u/trevorbrown8801"}},{"@type":"Answer","text":"
If her manager doesn’t see any productivity from her after 3, her manager needs to take it up with HR and meet with her to discuss work ethic. Then her manager and HR will need to monitor the situation for improvement. I don’t see IT being able to help with this without crossing the line. It would be no different than if she worked in the mail room and didn’t use a computer at all… After 3pm no more mail is getting sorted, HR and management will have to figure out why.<\/p>","upvoteCount":1,"datePublished":"2014-02-19T19:18:35.000Z","url":"https://community.spiceworks.com/t/need-help-tracking-a-users-inactivity/278687/18","author":{"@type":"Person","name":"kyle4591","url":"https://community.spiceworks.com/u/kyle4591"}},{"@type":"Answer","text":"
I agree with Rockn, If the inactivty report that your running doesn’t match when she is or isn’t there…that’s HR to decide to investigate her work hours.<\/p>","upvoteCount":0,"datePublished":"2014-02-19T19:27:30.000Z","url":"https://community.spiceworks.com/t/need-help-tracking-a-users-inactivity/278687/19","author":{"@type":"Person","name":"james485","url":"https://community.spiceworks.com/u/james485"}},{"@type":"Answer","text":"
I say it frequently… there is no technical solution for a behavioral problem. The answer lies in management asserting their expectations.<\/p>\n
If I were her manager, I’d start conducting company meetings that included her and schedule them for 4pm. <\/p>","upvoteCount":9,"datePublished":"2014-02-19T19:33:22.000Z","url":"https://community.spiceworks.com/t/need-help-tracking-a-users-inactivity/278687/20","author":{"@type":"Person","name":"toddadams7725","url":"https://community.spiceworks.com/u/toddadams7725"}}]}}
Looking for some advice. Was asked by HR today if I had a way to track a users inactivity.
Here’s the scenario:
User says she works from 9-5pm
Her Manager says she does not see the user after 3pm.
I have a domain policy that tracks login/logout activity also have our inhouse application db that we can generate login/logout reports from…but the main issue is the user is not logging out so reports dont match to what she says her work time is.
i can force a log off, but that doesnt necessarily mean she was at her desk when the session ended.
could I track any inactivity??? keylogger software, webcam??
I welcome any ideas, thanks in advance guys…
25 Spice ups
rockn
(Rockn)
February 19, 2014, 5:40pm
2
Almost impossible to track attendance based on computer usage. This is an HR problem not an IT problem. If they believe she is leaving at 3:00 then HR needs to babysit her and have her come to the office when she starts her day and leaves at the end of the day.
42 Spice ups
Or, as OP suggested, HR could install a camera at the door. You’ll seen when people enter and leave that way. It won’t be targeting this one user, either, which makes it much less likely to cause any kind of legal issues.
5 Spice ups
dmc1981
(DMC1981)
February 19, 2014, 5:46pm
4
You might look at this: Using Windows Auditing to track user activity | Peter Gubarevich
Talks about using Audit Policies, which can be pushed out per Windows PC or via GPO. You can do more than just track login/logout activity. Maybe set it up to check access to the folder where Outlook is run or something obvious like that?
Maybe also check your VPN logs to make sure the user isn’t working remotely.
2 Spice ups
You might look at this: Using Windows Auditing to track user activity | Peter Gubarevich
Talks about using Audit Policies, which can be pushed out per Windows PC or via GPO. You can do more than just track login/logout activity. Maybe set it up to check access to the folder where Outlook is run or something obvious like that?
The problem I see with any kind of computer logging is that the user can say something like “Oh, I was working on filing” or anything else that would keep them away from their PC.
9 Spice ups
If they are just looking for computer activity, I’d say just make a task via Task Scheduler to log off after an idle amount of time. (15 minutes) You can then look through your logon/off records to see if she is still trying to get in after that.That’s really all you can do from the IT side. If they want to know what she’s doing around the workplace, they’re gonna have to follow her. Either way they’re going to have to babysit her themselves
3 Spice ups
dmc1981
(DMC1981)
February 19, 2014, 5:51pm
7
Agreed. What I recommended is only PC related. Anything outside that scope would be an HR/management issue IMO… not something the IT dept is likely to be involved with unless they want to install a video monitoring system or something like that.
micadam
(Michael Adam)
February 19, 2014, 6:04pm
8
I didn’t try, but you could try o create a batch file, which will take the date and hour when the script is launch.
Then, with the task scheduler, you could create a task, which will launch the batch file when the computer is locked and unlocked.
You can do this like that in powershell:
get-date >> c:\yourfile.txt
Don"t forget to do manually on the workstation:
set-executionpolicy unrestricted
(and put it at restricted again when your are done with your monitoring)
EDIT: Tested, and worked perfectly. it give you the time when it got locked, and the time when it got unlocked.
If you need help to create the task, do not hesitate. I joined the script in attach file.
EDIT2: you must put a gpo which lock session after 5minutes(or else) of inactivity, otherwise it wont work…
2 Spice ups
rockn
(Rockn)
February 19, 2014, 6:15pm
9
And if they do not log off of their computer then what? And if the end user is really smart they will set up a scheduled task to log themselves off at 5:00
1 Spice up
Take a look at Spector 360 . It has the ability to track user activity. Not just logon and logoff, but actually when they are active and inactive .
I’ve attached an example screenshot of a user activity overview.
In the image above, the blue highlighted area indicates where the user is logged in. The dark blue represents inactive time and the lighter blue represents active time.
Let me know if you have any questions or if I can show you Spector 360.
8 Spice ups
john1858
(John2916)
February 19, 2014, 6:26pm
11
I have had similar requests, and my answer is always that it isn’t a problem IT can solve. Good luck!
3 Spice ups
micadam
(Michael Adam)
February 19, 2014, 6:44pm
12
better idea than my previous, in task manager, there is a trigger for inactivity.
You can use it to launch the script every 15minute of inactivity, like that you’ll see when the employee is not working for 15 minutes.
1 Spice up
dan4049
(Dan Kay)
February 19, 2014, 6:55pm
13
Have you thought about physical seat monitoring? We are doing some testing for a few companies that monitor activities of their employees… just a side thought.
mhunt
(MHunt)
February 19, 2014, 6:57pm
14
Legal minefield, that is way to close to invasion of privacy.
(IIRC people snooping webcams have gone to jail for it.)
I agree with the above posters, attendance should be verified by HR.
There are plenty of non technological ways to determine if someone is at their desk. Normally it would involve someone from HR getting off their 4$$ and going to look!
5 Spice ups
It is a Human Resources problem. But that doesn’t mean that it is a problem that IT can’t help solve. Billing is a function of accounting, but that doesn’t mean that IT can’t help make the task more efficient.
8 Spice ups
rockn
(Rockn)
February 19, 2014, 7:00pm
16
It is only a problem IT can help solve if requested to do so by HR, not this person’s manager.
3 Spice ups
Old school – physical time clock.
8 Spice ups
kyle4591
(Kyle K)
February 19, 2014, 7:18pm
18
If her manager doesn’t see any productivity from her after 3, her manager needs to take it up with HR and meet with her to discuss work ethic. Then her manager and HR will need to monitor the situation for improvement. I don’t see IT being able to help with this without crossing the line. It would be no different than if she worked in the mail room and didn’t use a computer at all… After 3pm no more mail is getting sorted, HR and management will have to figure out why.
1 Spice up
james485
(James485)
February 19, 2014, 7:27pm
19
I agree with Rockn, If the inactivty report that your running doesn’t match when she is or isn’t there…that’s HR to decide to investigate her work hours.
I say it frequently… there is no technical solution for a behavioral problem. The answer lies in management asserting their expectations.
If I were her manager, I’d start conducting company meetings that included her and schedule them for 4pm.
9 Spice ups