Re: Tracking Users on SBS Network (Security) - Help!!!

Tech-Archive recommends: Fix windows errors by optimizing your registry

Additionally, I believe if you set her account to only be able to logon to
her computer and no others, she won't be access them via RWW to shut them
down.

Server Management>>Standard Management>>Users, Her User properties>>Account
tab, click on Log On TO button.

--
hth,
SusanV


"Costas" <cpstechgroup@xxxxxxxxx> wrote in message
news:OKoCLDNiHHA.4732@xxxxxxxxxxxxxxxxxxxxxxx
The following link points to the steps required to setup auditing to
files and folders
http://groups.google.com/group/microsoft.public.windows.server.sbs/browse_thread/thread/568c67d4f16298c9/a86b156fe01e533f?lnk=st&q=setup+file+deletion+auditing+in+SBS&rnum=1

Costas


<cassandramiller@xxxxxxxxxx> wrote in message
news:1177680325.872000.284880@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Hi All,

I am having serious problems with an employee which is causing a great
concern for the health and stability of my network. In short, I have
an employee who is getting cute and quietly trying to sabotage the
network.

Problems have been the following:

Server reports numerous attempts to log into the server by the
employee (little does she know I get reports of her login errors on
the morning server reports)

I get calls in the middle of the night from users claiming remote web
access is down. Then I find out it is due to someone turning off
their computers. I know it is her, but can't prove she initiated the
shutdown.

We have a company share folder, where files are stored. In the middle
of the afternoon, I get a frantic call from employees stating multiple
directories have been wiped out of the company share folder. After
doing a search, it is revealed that someone moved the directories deep
deep deep into a sub folder directory. So deep, I know its not
coincedental, but rather intentional. I know it is her.

I guess my question is, is there any way to track users
actions...specifically, where they move files and folders? I'd like to
get this person fired but need proof of their actions. Does SBS have
a reporting/tracking feature for this? Any help would be greatly
appreciated.

**H&K**

~CaSsIe~




.

Quantcast