View Off-Site Users' Actions

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: "Devon Sedlydins" <sedlydin@xxxxxxxxx>
Date: 28 Apr 2006 08:34:23 -0700

How can I view which Users are logging in from off site, what IP
addresses they originate from, and which programs are accessed by those
Users? Is this possible? I would actually also like to view their
keystrokes while they are online, but I don't know if that is possible
either.

I suspect the system may have been compromised, that is, but I want to
both make sure of it, and also see what information is being sought.

We are using a Sonic firewall and Terminal Services (MSTC) for Users to
access the Win2000 Server.

.

Follow-Ups:
- Re: View Off-Site Users' Actions
  - From: Richard G. Harper

Prev by Date: Re: Can't install Network Printer on Win2000
Next by Date: Re: DHCP Inside / Outside
Previous by thread: Can't install Network Printer on Win2000
Next by thread: Re: View Off-Site Users' Actions
Index(es):
- Date
- Thread

Relevant Pages

Re: RDP Sessions not "disconnecting"
... You can logon to the Console as Admin and Disconnect instead of logging off and this will leave Admin logged on to Synch Act and will leave 2 more Remote slots open. ... The other choice is to disconnect from a normal session as Admin instead of Logging off and when you connect again you will resume your session. ... server based apps - she also hits it from remote. ...
(microsoft.public.windows.server.sbs)
Re: NDR delivery delayed errors keep coming, any advice?
... I have turned on the logging as you requested, and when I get a DNR 4.4.7, I ... The sending server tried to ... Delivery status notifications in Exchange Server and in Small Business ... The SMTP logging files are located in ...
(microsoft.public.windows.server.sbs)
Re: Login Errors Seem to indicate we are being hacked?
... As an example, my Sonicwall keeps a log that I can read from the regular UI, as well as having the ability to report to a syslog server or e-mail out the log info. ... thing on the box using that authentication package. ... The SMTP or IIS logs should answer everything. ... I'm not familiar with that particular router or its logging capabilities, ...
(microsoft.public.windows.server.sbs)
Re: RDP Sessions not "disconnecting"
... and insists remotely loggin on to server verses ... his Desktop to hit these 3rd party apps (ACT, Quickbooks, etc.) when he's on ... RDP connection WITHOUT logging off. ... session there, or at least "disconnected" which i'm thinking uses up one of ...
(microsoft.public.windows.server.sbs)
Re: Exchange 2007 distribution group creation
... I checked this and they all have level 1 diagnostic logging. ... your DCs that your Exchange server talks to. ... universal distribution group in exchange management console. ...
(microsoft.public.exchange.admin)