Re: Tracking Users on SBS Network (Security) - Help!!!
- From: ALeghart <aleghart@xxxxxxxxx>
- Date: 27 Apr 2007 11:09:50 -0700
To record user activity, the server logs may not be the most reliable
method. This is cumbersome at best, and only reports specific log
activity related to some server activity.
If you want more comprehensive monitoring, consider monitoring
software that runs at the workstation level. You can record user
activity, keystroke, print actions, file copies, logins, application
activity, and screen shots.
There are some consumer-grade applications for $50-100, but only work
on one workstation. There is a commercial-grade product available
that tracks users on all computers, sorts by user or workstation, and
has configurable alerts and allow/deny rules for certain types of
traffic.
This is not just for malicious activity. It can be used for tracking
login/logout times, workstation hopping, productivity, IM & web
browsing, applications usage, troubleshooting software crashes, or
finding introdution of malware.
Let me know if you need more details or a recommendation.
Regards,
Alan
On Apr 27, 6:25 am, "cassandramil...@xxxxxxxxxx"
<cassandramil...@xxxxxxxxxx> wrote:
Hi All,
I am having serious problems with an employee which is causing a great
concern for the health and stability of my network. In short, I have
an employee who is getting cute and quietly trying to sabotage the
network.
Problems have been the following:
Server reports numerous attempts to log into the server by the
employee (little does she know I get reports of her login errors on
the morning server reports)
I get calls in the middle of the night from users claiming remote web
access is down. Then I find out it is due to someone turning off
their computers. I know it is her, but can't prove she initiated the
shutdown.
We have a company share folder, where files are stored. In the middle
of the afternoon, I get a frantic call from employees stating multiple
directories have been wiped out of the company share folder. After
doing a search, it is revealed that someone moved the directories deep
deep deep into a sub folder directory. So deep, I know its not
coincedental, but rather intentional. I know it is her.
I guess my question is, is there any way to track users
actions...specifically, where they move files and folders? I'd like to
get this person fired but need proof of their actions. Does SBS have
a reporting/tracking feature for this? Any help would be greatly
appreciated.
**H&K**
~CaSsIe~
.
- Follow-Ups:
- Re: Tracking Users on SBS Network (Security) - Help!!!
- From: Brian Cryer
- Re: Tracking Users on SBS Network (Security) - Help!!!
- References:
- Tracking Users on SBS Network (Security) - Help!!!
- From: cassandramiller@xxxxxxxxxx
- Tracking Users on SBS Network (Security) - Help!!!
- Prev by Date: Re: SBS 2003 R2 Premium backup strategy
- Next by Date: Re: New server added
- Previous by thread: Re: Tracking Users on SBS Network (Security) - Help!!!
- Next by thread: Re: Tracking Users on SBS Network (Security) - Help!!!
- Index(es):
Relevant Pages
|
