Re: Server Activity
- From: "Lanwench [MVP - Exchange]" <lanwench@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Tue, 20 Nov 2007 15:27:14 -0500
John W <jw2554@xxxxxxxxx> wrote:
I'm looking for some suggestions on how to monitor what a user is
doing while they are logged into our server. We have a user with
administrative rights that logs into our server and helps us when we
have problems. I've noticed some some changes and errors that have
given us reason to think there might be something more going on that
what he's paid to do. Is there anything we could use to monitor and
log what this user is doing? It's always a remote connection so
something like a keylogger would not work. I appreciate any
suggestions.
Thanks!
Well, you could turn up auditing, but that may not do enough. All you could
use *is* something like a keylogger.
Seriously, if you have reason to distrust this user, take away the admin
rights. You should actually consider delegating permissions (I'm presuming
you use AD here) and installing a taskpad on this user's PC, so he doesn't
need to log into the server at all. You can give him just the rights he
needs.
.
- Follow-Ups:
- Re: Server Activity
- From: John W
- Re: Server Activity
- References:
- Server Activity
- From: John W
- Server Activity
- Prev by Date: Re: Redirecting a UNC path to the localhost - DR
- Next by Date: Demoting DC and Removal from Sites and Services
- Previous by thread: Server Activity
- Next by thread: Re: Server Activity
- Index(es):
Relevant Pages
|
