Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Which event logs should be watched to see when an Active Directory user connects to internet? For example user is logged in to PC offline then connected to internet, is it possible to see user is connected to internet?

share|improve this question

migrated from Jun 20 '11 at 13:15

This question came from our site for professional and enthusiast programmers.

what OS? define "connected to the internet" – Jim B Jun 20 '11 at 14:25
Windows OS, since user is AD user. With connected to internet I mean gets an IP address and is connected to network. – abbas sebastian Jun 21 '11 at 5:44
which windows OS (XP 2003 7 vista etc) – Jim B Jun 21 '11 at 15:59
All windows versions starting from 2000/NT – abbas sebastian Jun 22 '11 at 6:23

No. There is no such thing as "connected to the internet" from an AD perspective. You probably mean "using a browser", and that doesn't mean anything to AD either.

If you want to track user activity with regards to the Internet, you need either an agent on their machine that tracks everything, or something that sits on or near the internet gateway to capture or log all traffic, and also can query AD to see what users are associated with which local systems.

share|improve this answer
I mean when gets an IP, connected to network. Isn't this logged in event logs? – abbas sebastian Jun 21 '11 at 5:41
Not in any useful way. The workstation gets a DHCP-provided IP address on boot (if it's not static), but that has nothing to do with the user, and nothing to do with any internet activity. – mfinni Jun 21 '11 at 10:51

You may setup a proxy with integrated authentification against Active Directory and apply a GPO to enforce users using it. You'll then be able to process the logs of the proxy to see who's browsing Internet.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.