FWNUA (Free Windows Network User Accounting) runs silently in a Windows login script or GPO and collects data about user logins. FWNUA keeps track of the workstations logins so you don't have to!
FWNUA now supports syslog and Splunk! Look for the fwnua - syslog version in the files list. Use Splunk or your own syslog server with data mining tools to create a robust user tracking system.
Find our Spunk app on Splukbase: https://splunkbase.splunk.com/app/2773/
- Human readable Windows Security user auditing
- User to DHCP IP tracking
- User to computer name tracking
- User account auditing
FWNUA allows me to keep track of users who log into computers with dynamic IP addresses. I now have a single portal to identify every system a user has been logged into and what IP address the computer has had over it's lifetime on my network. This enables me to track down users and their activites very quickly. This is something the windows secruity event logs can not do. My opinion may be bias, but this little utility has saved the day on numerous occasions. We have even had reports of companies using FWNUA as a means of employee time tracking.