RE: Shadowing Terminal sessions

Have you looked at the native SHADOW command (command prompt utility to
shadow sessions.) Is that good enough with a bit of custom scripting to
detect sessions and start a shadow. Possibly not!

Alternatively, Citrix had a technology preview of project IRIS available
earlier in the year (see
http://www.brianmadden.com/content/content.asp?ID=469) Not sure where
that is in terms of release (not available on mycitrix now) but that had
full surveillance/auditing and sounded a perfect fit for your
requirements.

Hope that helps (but probably not!)

Cheers
Drew


-----Original Message-----
From: listbounce@xxxxxxxxxxxxxxxxx [mailto:listbounce@xxxxxxxxxxxxxxxxx]
On Behalf Of dubaisans dubai
Sent: 04 October 2006 07:10
To: focus-ms@xxxxxxxxxxxxxxxxx
Subject: Shadowing Terminal sessions

Hi,

We have a single hop model for administering Windows servers in
datacenter. First admins login using RDP from their desktops to
Microsoft Terminal server which serves as a gateway. From the gateway
they open a second terminal connection[RDP] to their own application
servers.

This gateway terminal server is maintained by Information security
team. On this server it is required to shadow all sessions that are
happening. It should be happening in the background and fully
automated. Since there is little control for Infosec team on the
application servers this is being done for maintining audit trail and
forensics. The server hardware sizing and storage requirements for
gateway can be taken care of.

Is this possible with just Microsoft Terminal server ?

We are open to using a different product other than Microsoft Terminal
server [ like Citrix or Sun Global desktop]if it has this feature.We
are also open to using a add-on product which will provide only this
shadowing function.

------------------------------------------------------------------------
---
------------------------------------------------------------------------
---


---------------------------------------------------------------------------
---------------------------------------------------------------------------

Relevant Pages

  • Re: Shadow user seesions via Terminal Server Manager
    ... but they were doing so from TSM on the SBS server ... > shadow the sessions via TSM; the list of machines is still there, ... > sessions on XP Pro machines. ...
    (microsoft.public.windows.server.sbs)
  • Re: Event ID 538 Logon Type 3 NT AUTHORITY/ANONYMOUS LOGON
    ... server for successful anonymous logoff which indicates that these events may ... Client for Microsoft Networks enabled on your server is causing the null ... > In your response, you mentioned 'null sessions'. ... > Computer Browser service is disabled on ...
    (microsoft.public.win2000.security)
  • Re: Shadow user seesions via Terminal Server Manager
    ... shadow the sessions via TSM; the list of machines is still there, ... The bottom line is that I want an outside vendor to be able to shadow ... sessions on XP Pro machines. ...
    (microsoft.public.windows.server.sbs)
  • RE: Terminal server exeeded the maximum number of allowed connections
    ... server, please perform the following steps to see whether other users are ... Remote Desktop connections yours? ... double-click RDP-Tcp in the Connections folder and click the Sessions tab. ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • RDP Shadow Mode: How to pass CTRL+ALT+DEL to remote?
    ... I have set up RDP shadow mode on a remote Win Server 2003 server per the ... then shadow the console session fine from my Win XP network client. ...
    (microsoft.public.windows.server.networking)