It should be auditlog.exe. In reality, auditlog gleans this information from the security event log which is flawed. Logons are recorded correctly but some logoffs are missed. Therefore, some users look like they've been logged in for hundreds of hours. M$ at its best. Steve Raffensberger Computer Aid serving Agere Systems -----Original Message----- From: Scott [mailto:sreichardt@xxxxxxx] Sent: Wednesday, September 03, 2003 1:26 PM To: thin@xxxxxxxxxxxxx Subject: [THIN] Monitoring logged in users time Win2k/MFxp What is the easiest way to track how long a user has been logged in to a citrix server? Thanks, Scott