Re: audit user logon activity

From: Josh Mills (joshdmills_at_gmail.com)
Date: 10/07/04

  • Next message: Paris E. Stone: "RE: MAC level authentication or filtering"
    Date: Thu, 7 Oct 2004 11:55:12 -0500
    To: chang zhu <cyz2000@yahoo.com>
    
    

    you could try languard SELM its not free but it is very cheap. this
    can be configured to track the logs of every machine on your network
    and can also be set to send alerts for certain events.

    On Wed, 6 Oct 2004 12:11:05 -0700 (PDT), chang zhu <cyz2000@yahoo.com> wrote:
    > Hi, all
    >
    > I tried to find out how to find whether a user logs to
    > multiple computers on the network. From MS security
    > log, I can notfind anything I want to. Is there any
    > windows freeutility which allows to audit a user's log
    > onactivity?
    > (BTW, we are in windows 2000 environment).
    >
    > Thanks,
    >
    > chang
    >
    >
    > __________________________________________________
    > Do You Yahoo!?
    > Tired of spam? Yahoo! Mail has the best spam protection around
    > http://mail.yahoo.com
    >


  • Next message: Paris E. Stone: "RE: MAC level authentication or filtering"

    Relevant Pages

    • Re: Log file full of security problems!
      ... having with my small peer-to-peer network. ... Primary User Name: Mark ... Primary Logon ID: ... Disable the logging for the time being; Clear the logs or copy them to ...
      (microsoft.public.windowsxp.network_web)
    • Re: account not allowing domain access
      ... It sounds like it could be a problem with wrong credentials, network ... Have the admin check the security logs of LT2000s to see if there are any ... have basic connectivity to it and if you can not ping by name try it's IP ... like profile settings, please let me know where to get that so I can post ...
      (microsoft.public.windowsxp.security_admin)
    • RE: Anon Logon Events 538/540
      ... The event 540 logs the Successful Network Logon and the event 538 logs the ... Successful Network Logoff. ... Windows 2000, and Windows XP) ...
      (microsoft.public.windowsxp.security_admin)
    • RE: Setting up an IDS system
      ... and filtering my logs for sensibly viewing i.e. colour coded etc. ... earlier post about filters on routers). ... but this is to be aware of traffic patterns and network activity. ... Setting up an IDS system ...
      (Security-Basics)
    • Re: Tracing linux server hacking
      ... After 8-9 hours of our network professionals looking ... The usual advice is to not boot a possibly compromised hard disk. ... There are any number of live CD forsenics disks out there. ... Usually you start looking at logs. ...
      (comp.os.linux.security)

  • Quantcast