How can I monitor when anyone in my organization has logged into a certain server and revive a notification?

Article Comments

Have you seen this thread about monitoring the event log already? You could use it to filter for login events and even alert you if a certain user logs in with the ErrorStrings/WarningStrings parameter. The ID of login events would be 4624 :)


May, 2015 - Permalink

This can be done using the UsersLoggedinXML sensor.

It retrieves the users logged in to a specified Windows computer and parses the data as a multichannel result to PRTG.

Parameters:

 -c=	 DNSName or IP-Address of the computer to monitor. 
 -a=	 Optional comma separated list of accounts to monitor.
         (i.e. -a=Administrator,John,Mike )
 	 Omitting this parameter, will create a channel for every user that connects to the pc. 
 -u=	 Optional Domain\Username of a user account that has access to the computer 
 	 via WMI service. 
 -p=	 Optional Password or Passhash of a user account that has access to the computer 
 	 via WMI service.

May, 2015 - Permalink