Simple AD Question

[JJ1]

All,

I'm new to Windows Servers and AD, but have a fairly straighforward question.

What I'm wondering is whether AD keeps an audit trail of which machines a user has logged into?

i.e. Is it possible to choose a username (say 'james') and find out the hostname of the last machine 'james' logged into?

Assuming the answer is yes, can one browser this information via the AD "users and computers" MMC snap-in?

Thanks in advance,

James.

 

[aftertaf]

you can set audit policies and restrict them to just one person or group.

but this is not visible in the mmc. It appears in the security log on the DC.

Aftertaf
Last time I checked, i wasn't Mike Lacey

 

[JJ1]

Thank you Aftertaf.

So the best way of tracking which users logged into which machines is to set an audit policy for every user?

By "security log", do you mean the Security section of eventvwr?

Apologies for the newbie nature of my questions.

James.

 

[coopermarsh]

thats correct.