Track user behaviour through event log

From: Søren Maigaard (spam@maigaard.com)
Date: 05/31/02 

From: "Søren Maigaard" <spam@maigaard.com>
Date: Fri, 31 May 2002 14:09:43 +0200

Is there a program that can track user behaviour through the event log?
That is, see which files she opens, when and how many, how many times she
tries to log on and at what hours - and then create a profile for that user
over time. If she then does something outside of this profile (for instance
tries to access different files than she usually does and at 3 o'lock at
night) it would alert the administrator. Is that possible?

TIA,

- Søren

Relevant Pages

  • Re: Track user behaviour through event log
    ... > Is there a program that can track user behaviour through the event log? ... > That is, see which files she opens, when and how many, how many times she ... If she then does something outside of this profile (for ...
    (microsoft.public.win2000.security)
  • VC++ Error on My Computer, IEXPORE and Folder Items
    ... get a VC++ Runtime Error with explore.exe. ... Product: Windows Operating System ... Component: Application Event Log ... The profile for user %1 is mandatory. ...
    (microsoft.public.windowsxp.security_admin)
  • Event Log Errors
    ... I have been getting these errors in the event log for some time. ... Windows cannot find the local profile and is logging you on with a temporary profile. ... see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. ...
    (microsoft.public.sharepoint.portalserver)
  • Re: Cannot locate roaming profile
    ... event log, but I am still unable to load anything but the default user ... In the terminal services profile under my user infromation I ... 327259 - Windows Server 2003 Checks for Pre-Created Roaming Profile ... causes of this error include network problems or insufficient ...
    (microsoft.public.windows.terminal_services)
  • Re: mydocuments missing after logff logon sbs2003 win xp
    ... The computer that has had the missing documents is in fact our Raiser's ... I was also curious as to why the event log audit entries show my document ... off or restart the computer. ... restoring my docs (did not delete the profile), ...
    (microsoft.public.windows.server.sbs)