Our setup is as follows. All users login first to their local PC, and then from there they login to our Terminal Server using RDP connection from local machine. I need to create a report which will show login and logout dates/times to local PC. I also need to create a separate report which shows login and logout dates/times to the Terminal Server. The columns I need for each report are - Login date, login time, logout date, logout time, UserID. We have already enabled Audit Logon Events policy. How do I create these reports please? If I look in the Event Viewer, I cannot add the TargetUserName column to the view, which is the column I need. The only way from the Event Viewer is to go through each event manually and see what the user is for each event. Also, there is an event in the Event Log for Security events, which has a category of 'Log clear' - how do I stop this event from occurring? Where is the location to switch this off? Many thanks to all for help Naz

Hi, After test, I found that you cannot get the user name from that view unless you click the entries one by one manually. For the second question, it also seems the category cannot be disabled. Juke Chou TechNet Community Support

Hi Naz, I have configured active directory users logon and logoff report through group policy.. Refer my blog link http://techhowknow.com/2012/03/how-to-configure-active-directory-users-logon-logoff-report/ If it useful , please reply meK.Ganesan My Blog - TechHowKnow