FWNUA (Free Windows Network User Accounting) runs silently in a Windows login script and collects data about user logins. It allows more freedom in standardized computer naming. FWNUA keeps track of the workstations so you don't have to!
FWNUA now supports syslog and Splunk! A fork of the current 3.0 version can now be downloaded. Look for the fwnua - syslog in the files list. Use Splunk or your own syslog server with data mining tools to create a robust user tracking system.
- Human readable Windows Security user auditing
- User to DHCP IP tracking
- User to computer name tracking
- User account auditing
FWNUA allows me to keep track of users who log into computers with dynamic IP addresses. I now have a single portal to identify every system a user has been logged into and what IP address the computer has had over it's lifetime on my network. This enables me to track down users and their activites very quickly. This is something the windows secruity event logs can not do. My opinion may be bias, but this little utility has saved the day on numerous occasions. We have even had reports of companies using FWNUA as a means of employee time tracking.