Sysadmin/AD/GPO experts, a question...

[Jack!]

I've added some strings to a logon script to record a log of AD Users and Computers, the logs for each user and each computer is updated every time they log on.

This is fine for a business where all their users work from offices on the internal network, but increasingly people are working from home via VPN etc.

Is there a way to make a logon script run on VPN connection, assuming the use of Windows built-in client, or does the 90 minute GPO refresh apply if someone has been connected to the VPN for 90 minutes and I could force a batch file or something via GPO to update these logs?

Any suggestions on the best way to do this? Is it even possible?

 

[Andy.]

Can you use a scheduled task deployed with a GPO? I am fairly sure you can use the VPN connection as a trigger.

 

[andybond]

What VPN tunnelling software are you using?
For reference background policy is refreshed 90mims+/-30mins at a random integer.
You could be fly and create a Powershell script that emails you the logs.
What are the logs for out of curiosity?

 

[rctempire]

Would it not be smarter to use a proper tool like ADAudit Plus?

Just make your life easier really