Support
 
Phone Get Quote
 
Support
 
US: +1 888 720 9500
US: +1 888 791 1189
Intl: +1 925 924 9500
Aus: +1 800 631 268
UK: 0800 028 6590
CN: +86 400 660 8680

Direct Inward Dialing: +1 408 916 9892

Live Chat

Get Quote

ADAudit Plus » Get Quote
 
  

WinLogOnView is a tool, developed by NirSoft, that collects and displays the user logon and logoff events by analyzing the Windows security logs.This utility can be beneficial to monitor the users' logon activity and detect if anything is amiss.

How do we use WinLogOnView?
  • Run the executable file WinLogOnView.exe.
  • When the file is executed, it displays all the logon sessions recorded on your system.
  • Click on any particular logon session to find more details about it. Apart from the logon/logoff time, you also get other details such as the logon duration, the user name, the workstation, the logon type, the network address.
  • To find the logon activity on a remote computer, go to the Advanced Options window and select the data source as a remote computer and enter the name of the remote computer to find the necessary information.

This tool scans log data from the Event Viewer for the event IDs 4648 ( A logon was attempted using explicit credentials), 4647 (User initiated logoff), 4624 (An account was successfully logged on), 4625 (An account failed to logon), 4800 (The workstation was locked), 4801 (The workstation was unlocked). The details about the events monitored can be saved in formats such as TXT, HTML, CSV, and XML.

This simple tool can help an admin to monitor the logon/logoff activity on a network. It can help in detecting any unusual logon attempt or activity and that might help prevent a cyber attack.

ManageEngine's ADAudit Plus is a tool that is designed precisely to audit such events in a network environment. While WinLogOnView simply displays the relevant logs directly from the Event Viewer, ADAudit Plus retrieves and processes multiple event logs from the Event Viewer to give you comprehensive and user-friendly reports on the same. ADAudit Plus can audit and report in real-time on a wide variety of Active Directory events and offers over 200 pre-packaged audit reports that can be generated instantly.

Download ManageEngine's ADAudit Plus, a real-time Active Directory auditing and reporting tool. It can help you understand employee behavior with regards to IT, to thwart insider and outsider attacks, and also with compliance requirements.

More related links

✕

Native auditing becoming a little too much?

Try ADAudit Plus to audit, track, and respond to malicious activities happening inside your Windows AD & Azure environment.

Try ADAudit Plus for free
 

ADAudit Plus Trusted By

Meet all auditing and IT security needs with ADAudit Plus.

  • Active Directory
  • File servers
  • Windows server
  • Workstation
  • Compliance
  • Related Products

A single pane of glass for complete Active Directory Auditing and Reporting

Free Trial Get Quote
Back to Top