how to capture screen lock

[sdmayhew]

I had this scripted about 4 years ago using the windows lock and unlock. for whatever reason I am spacing on where the altiris agent pulls the logon/logoff events. Should be able to clone the stock script to pull Other Logon/Logoff events.

I already know that I can pull up a individual machine. I want to do it on a large scale to supplament my logon/off time periods. My enviroment has users

 

Logon/Logoff	Other Logon/Logoff Events	4800	The workstation was locked.
Logon/Logoff	Other Logon/Logoff Events	4801	The workstation was unlocked.

 

 

512 / 4608  STARTUP
513 / 4609  SHUTDOWN
528 / 4624  LOGON
538 / 4634  LOGOFF
551 / 4647  BEGIN_LOGOFF
N/A / 4778  SESSION_RECONNECTED
N/A / 4779  SESSION_DISCONNECTED
N/A / 4800  WORKSTATION_LOCKED
* / 4801    WORKSTATION_UNLOCKED
N/A / 4802  SCREENSAVER_INVOKED

[Migration User]

This is pulled from the Evt_AeX_Client_Logon table.  I don't believe these methods are exposed for modification, so I imagine your modification in the past used a custom inventory script to parse the event viewer logs.

[Migration User]

I am new to Altiris.  Just when I convinced Technology staff to populate the KB, we are now realising that it will not copy over flowcharts, diagrams etc, which is damn annoying,  as a lot of people use these as part of their documentation now. 

Would really appreciate some help please.....

Thanks