I work a large company and we currently have around 2000 users who all access the same domain.
I was asked earlier this week by our HR dept if we could pull off all the login times for one particular user for the month of June. I can quite easily pull off the last login for the user although when it comes to going back historically to get a login time for each day in June I am at a loss as the best way to do this, or if its possible.
I can archive the security event log, but it would mean trawling through the logs each time I asked a question like this. Are there any better solutions/strategies that you aware of for auditing within AD?
Any thoughts/suggestions would be appreciated.