We need to track the LogOn – LogOff times for a certain employee.
(Yes, he has been doing bad things !
How can I filter these events by LogonName ?
(And if Steve Ballmer should happen to listen in on this thread :-) -how come, knowing that more than 50% of all IT-criminal activity is done by inhouse employees, that such a simple question is so hard to get answers for ??)