Re: Active Directory User Account Activity

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Yeah, my suggestion is to use the log files I mentioned. Why? Because they
are server side and more likely to be accurate, up to date, and not messed
with. Also, they have no footprint on the client side so not as likely to
adversely impact users.
You can use scripts to parse the log files looking for specific information.
Not terribly difficult and the link I sent earlier would have some examples
I'm sure.

I don't dabble in the keyloggers, so I'm not really up to speed on how they
would be better or worse.

Running a script on the client side is fine, but how do you tune it? To
record what? And if you did that, would it be accurate? Bug free? You don't
come across as terribly comfortable with scripting, so I'm guessing that
there will be a learning curve. That implies some issues that could be
avoided by using the log files.

My thoughts.


"Matt" <mattsetters@xxxxxxxxxxxxxxxx> wrote in message
news:7BBB50D7-BC87-42D8-91A0-0CA44605674C@xxxxxxxxxxxxxxxx
yes thats correct, i am however open to many other solutions maybe a vb
script that can log to a .txt file or something i am willing to try an
implement aleast one of my ideas not both so if you have any suggestions
please fire away

i will be most appreciative also


"Al Mulnick" <amulnick_No_SPAM@xxxxxxxxxxx> wrote in message
news:eW3Qn4fgHHA.1216@xxxxxxxxxxxxxxxxxxxxxxx
I don't know of any off the top of my head. Most of the environments I
work in are too large for that to be a viable solution.
But at least you know what class of application, right?

"Matt" <mattsetters@xxxxxxxxxxxxxxxx> wrote in message
news:ulx%23f0fgHHA.2332@xxxxxxxxxxxxxxxxxxxxxxx
Yes a keylogger type program, i do know there are ones made for
business's that use client/server basis. i have used one b4 but cant
remeber what it was called was over a year ago on ws2k3 standard

The program i used used a main app on the server that constantly logged
key types, apps opened, internte history etc you get the deal here. and
there was a small client app installed on an xp pro client which sends
the info to the server.

the server then records it and saves it into a log incrimentaly



"Al Mulnick" <amulnick_No_SPAM@xxxxxxxxxxx> wrote in message
news:esCklxfgHHA.2332@xxxxxxxxxxxxxxxxxxxxxxx
Account auditing is a pretty normal way to get the logon/logoff
information although it can be kind of tough to really see what's going
on. To gather RDP attempts though, it will very much pull that
information.

IIS has it's own logs, so you can pull information from there and see
which machines/users are accessing what at what time.

But I think what you're looking for is a keylogger type of application.
Is that right?


"Matt" <mattsetters@xxxxxxxxxxxxxxxx> wrote in message
news:524CB212-ED93-401D-9380-6B938899597B@xxxxxxxxxxxxxxxx
To know what applications and web pages have been opened and viewed, i
am the administrator of a network at a small school type place and
there are people that are always trying to hack and get onto the
server either via rdp or some other way so i want to be able to see
who is doing this and when. primarily however web usage is another
thing i need to record

"Al Mulnick" <amulnick_No_SPAM@xxxxxxxxxxx> wrote in message
news:e7Ou6zegHHA.1216@xxxxxxxxxxxxxxxxxxxxxxx
What's the goal?

"Matt" <mattsetters@xxxxxxxxxxxxxxxx> wrote in message
news:BE50A1A7-20F8-4600-AF29-36C0FA696EBC@xxxxxxxxxxxxxxxx
Hi There,

Is there a piece of software about that can effectivly act as a user
account activity logger in conjunction with AD, so i can get the
login and log out times recorded and also application usage etc. Im
sure someone must know of a way to do this i did hear a few years
back there was some software that worked on a client/server basis to
record the account activity.

I appreciate any answers for this as it is one step closer to the
goal.

Thanks in advance Matt











.

Relevant Pages

  • Re: Banana Republic (was Re: OpenVMS Book Wins award)
    ... overtaken by the more prosaic aspects of supporting WASD. ... for example), that it is better economy, if a client breaks the ... to allow a script to run to completion rather than try and ... The server just throws away ...
    (comp.os.vms)
  • Re: Regarding a selection for mobile code/scripting language
    ... Client Side scripting, so the server can send script commands to the client. ... I decided they should be scripted and mobile code. ...
    (Vuln-Dev)
  • Re: HTTPSConnection script fails, but only on some servers (long)
    ... (HTTP/CONNECT + switch to HTTPS) ... wget and my python script. ... >>The python script works with server A, ... the problem seems to depend on both the client ...
    (comp.lang.python)
  • Re: secure transfers and authentication
    ... Thanks james that looks to be a really handy guide on the whole thing. ... On a side note does anyone know why i have problems posting to the list using the reply function in my mail client? ... From the server ssh to your clients and save the rsa keys ... You could create a script like this: ...
    (Security-Basics)
  • Re: How do we get there from here?
    ... >> executing on the server as a pre-processor. ... If there are client side versions of PHP, ... > name implies a static text file, is it different from a PHP script? ...
    (comp.databases.pick)