Symantec Management Platform (Notification Server)

Hello all,

I'm trying to get statistics on how many hours (in the past 30 days or so) our computers are being used.  There is a built-in report but it's really inaccurate and I've had various problems with it.  That report is "Computer Usage (month to date)" and is in "Notification Server Infrastructure" -> "Server" -> "Inventory Analysis Reports".

I'm looking into trying to create a custom report (my first one), however I'm weak in this arena and am wondering if anyone else has been in a similar situation who could provide some advice.  If you happen to have a custom xml files which you could post that would be greatly helpful.

So far I know I'd have to get data from at least a few data classes (WIN32_NTLOGEVENT is one) from the WMI database built into Windows.  For now I'm trying to keep it simple and just track usage based on logon & logoff events.  But eventually I'd like to track computer being locked & unlocked so I get a more accurate report of users actually using the computers.

Any help will be greatly appreciated!

If you know the exact reistry and wmi items you need, I can easily create you a custom inventory file which will extract this data and populate a table with it, so that you can then create your report based off of it.

SK.