Locked Recent Login History in TFS Web Access

  • Friday, April 13, 2012 2:29 PM
     
     

    Hi ,

    I want to check  last TFS log on times for the couple of users,  they use TFS Web Access.

    How to check when they logged in to tfs  last time ? 

    Regards

    Anantha



    • Edited by Anantha0301 Friday, April 13, 2012 2:46 PM
    • Edited by Anantha0301 Saturday, April 14, 2012 9:21 AM Modified Title
    •  

All Replies

  • Saturday, April 14, 2012 7:57 PM
     
      Has Code

    Hi Anantha,

    It would be great is TFS had a nice Web Service to do this, logged to the event log, etc, and there is some additional logging you can turn on but I've always found this a pain.  One thing you can do (especially if you know what you are looking at for commands that suspect have been run) is the tbl_command table in the Collection DB.  For instance if you suspect a witadmin command has been run you can use something like this SQL query:

    select * from tbl_Command with (nolock) where useragent LIKE 'Team Foundation (witadmin.exe%'

    The usual precautions would apply here, like not running direct DB queries durring peak production times etc. but it allows you to quicly see a list of whats been run against TFS.  The Command column has a record of the command that was run.  When I had an issue at client of someone running unauthorized commands I was able to use this to track down the person quickly.

    You could also use some of the built in IIS logging on the Team Web Access site iteself as an alternative.

    Thanks,

    Gary

  • Sunday, April 15, 2012 2:53 PM
     
     

    Hi Gary,

    Thanks for your reponse but Database is not under control, there is separate dba team is looking in to this.

    Very difficult to find out under IIS logging on the Team Web Access  in this case out of 500 more than 400 + users will use webaccess.

    to capture th especific user login details i think so difficult.

    What I am looking here  just we want to check four specific users  what time they logged in tfs.

    Please provide me any easyest way to idenfity those users

    Regards

    Anantha

  • Monday, April 16, 2012 12:41 AM
     
     Answered

    Hi Anantha,

    Your best bet would be the IIS logs for the Team Web Access site if you cant query the DB. You can simplify this with a tool like WhosOn (http://www.whoson.com/). There are a ton of utilities like this, I just like the real-time log viewing features in there.

    Thanks,

    Gary

  • Monday, April 16, 2012 6:47 AM
     
     

    Hi Gary,

    Thanks for your quick response, How to check IIS logs for the Team Web Access site.

    Regards

    Anantha