Windows Server 2003 用户登录审核
声明：本页面是StackOverFlow热门问题的中英对照翻译，遵循CC BY-SA 4.0协议，如果您需要使用它，必须同样遵循CC BY-SA许可，注明原文地址和作者信息，同时你必须将它归于原作者（不是我）：StackOverFlow
原文地址: http://stackoverflow.com/questions/1073967/
Warning: these are provided under cc-by-sa 4.0 license. You are free to use/share it, But you must attribute it to the original authors (not me):
StackOverFlow
Windows Server 2003 User Logon Audit
提问by user96403
How to find what all users have logged on my Windows Server 2003. What is the property/setting/service that should be enabled to log all the logons to my server? Is there a way to display an alert mail or message (a script or something) whenever a user logs on?
如何查找所有用户登录我的 Windows Server 2003 的内容。应该启用哪些属性/设置/服务来将所有登录记录到我的服务器？有没有办法在用户登录时显示警报邮件或消息（脚本或其他东西）？
回答by eran
Go to Administrative tools -> Local Security Settings -> Local Policies -> Audit Policy, and on the right pane set the events you'd like to have logged in the event viewer.
转到管理工具 -> 本地安全设置 -> 本地策略 -> 审核策略，然后在右侧窗格中设置您希望在事件查看器中记录的事件。
As for sending an email or message upon login - you can create a batch file that will do that, and add a shortcut to the programs->startup folder. This will cause the batch to run whenever a user logs in (though not when a user connects to a disconnected session). As for sending an email, there are plenty of free command line emailers on the web, just pick one up. Or, you can NET SEND yourself a message.
至于在登录时发送电子邮件或消息 - 您可以创建一个批处理文件来执行此操作，并添加到程序->启动文件夹的快捷方式。这将导致批处理在用户登录时运行（但不是在用户连接到断开连接的会话时）。至于发送邮件，网上有很多免费的命令行邮件发送器，随便挑一个。或者，您可以 NET 向自己发送消息。
Lastly, you'd probably get better answers than these on serverfault.com, where more sysadmins would hang out.
最后，您可能会在serverfault.com上得到比这些更好的答案，那里会有更多的系统管理员闲逛。
回答by fretje
If you're working with Active Directory, you can implement an audit policythrough GPO.
如果您正在使用 Active Directory，则可以通过 GPO实施审核策略。
