We have Windows Server 2003 Enterprise DC for 2000 Windows XP SP3 Client Machine. We just want to centralized audit account logon/logoff event, security event log in windows client on one server. we are looking for best solution for this purpose, specially microsoft solution?

Is there any solution for SCCCM 2007?HOW?

because we have 2000 client machine, the database of log files is too large, and we just want to gather logon/logoff event.


You can probably do it via WMI with some scripting to pull remote logs matching a specific eventID, though it can be slow.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.