Accounting for the time of work of windows-users. What to count?

Question

Python

It is necessary to determine how much time the user spends at the PC. OS Windows 7, Windows 8. Computers in the domain. Locked out after 15 minutes of inactivity. Win2008R2 servers. It is necessary for both the manager (the indicator is closer to 8 hours) and the labor protection department (15 min breaks). The tools are very limited - I write a script in python. I'm thinking of getting hooked on Lync statuses, but I'm still figuring out how Lync Server keeps logs .. Tell me more options, please! Does AD keep logs like this (user activity)? Probably in Exchange there is something similar. in mail the current state of users is visible. The script must work on the server, without additional scripts on the PC - only the analysis of existing databases.

Answer 1

Sorry. I wrote the previous post from my phone. it was uncomfortable to write the details :) Therefore, I describe below:
Konstantin Gorodetsky :
GPO editor (gpedit.msc) - Computer Configuration - Policies - Windows Configuration - Security Options - Advanced Audit Policy Configuration - Login / Logout - "Audit other login and logout events"
If English version - I made a screenshot of the path for you ( https://yadi.sk/i/PsXueaq1j9j4b (well, suddenly it's hard to find =)))
Turn on "Success". And we track events, up to the inclusion of a screen saver.
You can see the event numbers here: https://technet.microsoft.com/en-us/library/Dd7726...

Answer 2

A bit superficial, but somewhere like this:
1. Write your own screen saver, which will send a message when activated.
2. Then, when the user enters the system, an event is generated in windows (wmi). I can’t tell you which one, there are a lot of them, you have to look. In general, I advise you to look at WMI - it can help a lot. Maybe in general it will turn out to do everything on WMI (you can write in JavaScript / CScript). I do not think that there is a bunch of Python / WMI, but anything can happen ...
3. Prohibit changing the splash screen by the user in the domain policies.
4. Add/subtract the resulting times.

Answer 3

AD solves this without additional bikes.