Why can't you use the logon/logoff screensaver or Winexit.scr from the NT 4 resource kit and set the event viewer to track logon and logoff and extract the events from event viewer? You can use Dumpevnt for that http://www.somarsoft.com/somarsoft_main.htm#DumpEvt JK -----Original Message----- From: windows2000-bounce@xxxxxxxxxxxxx [mailto:windows2000-bounce@xxxxxxxxxxxxx]On Behalf Of Sullivan, Glenn Sent: Monday, September 08, 2003 8:20 PM To: 'windows2000@xxxxxxxxxxxxx' Subject: [windows2000] Re: Events and user tracking Easiest way I can think of to do what you want is to write a screen saver (there are examples on the web for screen savers written in VB) and have it log to the event log, and then execute the stars screen saver or something. I'm sure it would be a 20 minute job, if you are a programmer... Glenn at home -----Original Message----- From: Rob Combis To: windows2000@xxxxxxxxxxxxx Sent: 9/8/03 4:22 PM Subject: RE: [windows2000] Re: Events and user tracking If it is not possible, it is not possible, what can I do. I just think it is kind of strange that there is no way to track this in Active Directory. It is just kind of baffling. Even to track when a user logs on and off, needs a separate application (custome or not). It just seems that this has to be possible. Oh well -----Original Message----- From: Costanzo, Ray [mailto:rcostanzo@xxxxxxxxxxx] Sent: Mon 9/8/2003 3:36 PM To: windows2000@xxxxxxxxxxxxx Cc: Subject: [windows2000] Re: Events and user tracking I don't believe that locking the workstation is a trappable event. If you force authentication to unlock, ~maybe~ that would get you somewhere, but I doubt it. Is "this is not possible using the current Windows operating system" an acceptable answer? Ray at work ********************************************************** To Unsubscribe, set digest or vacation mode or view archives use the below link. http://thethin.net/win2000list.cfm