Direct Inward Dialing: +1 408 916 9892
ADAudit Plus is a comprehensive Active Directory auditing solution that will help you monitor, and keep a track of employee work hours. It will also track events like network disruptions. Using ADAudit Plus, you can track your employees' work hours with intuitive reports.
You can configure these reports to be automatically generated and emailed to you at specified intervals. You can also export these reports to a format of your choice. Here is how you can access the employee work hour report using ADAudit Plus:
Login to ADAudit Plus → Go to the Reports tab → Under Local Logon-Logoff Reports → navigate to the User Work Hours report.
With this report, you can track the actual work hours of your employees. This could in turn help you with making decisions about your business productivity.With native auditing, here is how you can monitor employee work hours:
Launch Server Manager in your Windows Server instance.
Under Manage, select Group Policy Management and launch the Group Policy Management console.
Navigate to Forest --> Domain --> Your domain --> Domain Controllers.
Create a new GPO and link it to the domain containing the user object, or edit any existing GPO that is linked to the domain, and launch the Group Policy Management Editor.
Navigate to Computer Configuration -> Windows Settings -> Security Settings ->Local Policies -> Audit Policy.
Under Audit Policy, select Audit logon events and turn auditing on for both success and failure.
Now, navigate to Computer Configuration -> Windows Settings -> Security Settings ->Advanced Audit Policy Configuration -> Audit Policies -> Logon/Logoff.
Under Logon/Logoff, turn on auditing for Audit Logoff, Audit Logon, and Audit Special Logon for both successes and failures.
An event log will be recorded in the Event Viewer any time a user logs on, logs off, ends a session, or unlocks a system. These logs can be used to track employee work hours. To view these audit logs, go to the Event Viewer and, under Windows Logs, select Security.
To filter the event logs to view just the logs associated with employee work hours, select Filter Current Log from the right pane. Simply search for the event IDs 4624 (account was logged on), 4647 (account was logged off), 4634 (logon session end time), 4800 (system was locked), and 4801 (system was unlocked). You can see who logged on, when they logged on, when they logged off, and when the system was locked and unlocked.
Using this information, you can compute a user's work hours. You will need to repeat this multiple times if you want to compute the work hours of multiple users.
Native auditing becoming a little too much?
Simplify Active Directory auditing and reporting with ADAudit Plus.
Get Your Free Trial Fully functional 30-day trial
