Logon User Tracking

The Delinea Local Security Agent collects logon and logoff events from Windows on a schedule configured via the User Logon Inventory policy. The Agent collects logon and logoff events and reports them as inventory data. The Update Primary User for Collection task calculates the primary user and the primary user and associated inventory data can then be viewed in the Resource Explorer.

The User Logon Inventory Policy is by default active.

If you wish to customize the schedule or any other policy specification, create a copy of the default policy (More > Duplicate) and edit the settings.

The default update primary user for collection task calculates the primary user on a schedule from inventory data.

1. Navigate to Admin | Tasks.

2. In the folder tree open Server Tasks | Local Security and search for Update Primary User for Collection.

3. Click View.

4. Customize the settings and schedule by editing the task.

   

5. Click Save Changes.

You can run the Update Primary User for Collection task at any time to immediately recalculate the primary user for all computers in the selected collection.

Viewing the Resource

The Windows Logon Session events can be viewed by opening the Local User/Group Summary report and selecting a computer resource from the list. Then select Events | Local Security | Windows Logon Sessions.