Re: would like notification when remote users log on

From: Steven L Umbach (sumbach_at_nospam-ameritech.net)
Date: 01/29/04


Date: Thu, 29 Jan 2004 18:14:38 GMT

Make sure that remote assitance is disabled on the server, you should not
need that. These settings are in My Computer/properties/remote. If you look
in select remote users, it should be blank which will allow only members of
the administrators group to connect and remotely manage the server as they
would when logged on locally. Of course you need a firewall to protect from
internet access and use complex passwords for all the administrators to keep
unathorized users from trying to logon. You should also rename the real
built in administrator account and have a password lockout policy with a
threshold of no less than ten lockouts and a lockout period of at least ten
minutes. Enable auditing of logon events on the server for success and
failure which will show when a user has logged onto the server. There is no
built in way to get an email of such activity. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;300549

"Cara" <anonymous@discussions.microsoft.com> wrote in message
news:624701c3e617$d1bebb00$a001280a@phx.gbl...
> Hi
> I am new to server / network management, my tech person
> sold me Windows Server 2003 for Small business Server. He
> has enabled remote access. I would like to have the
> system notify me via e-mail whenever someone logs on or
> off remotely, but do not see this option in any of the
> help files I have read. Is it possible / how? Can I
> track the activities of a remote user to make sure they
> are legitimate? Also, can someone connect to a
> workstation remotely and monitor its activities without
> the user's knowledge?
>
> Any advice, or directions to targeted resources are much
> appreciated (I don't have time to read the entire help
> file)
>
> Thank you
> Cara



Relevant Pages

  • SecurityFocus Microsoft Newsletter #152
    ... MICROSOFT VULNERABILITY SUMMARY ... Real Networks Helix Universal Server Remote Buffer Overflow ... ... NEW PRODUCTS FOR MICROSOFT PLATFORMS ...
    (Focus-Microsoft)
  • SecurityFocus Microsoft Newsletter #140
    ... Cafelog b2 Remote File Include Vulnerability ... Webfroot Shoutbox Remote Command Execution Vulnerability ... Pablo Software Solutions Baby POP3 Server Multiple Connection... ... Microsoft Windows XP Nested Directory Denial of Service... ...
    (Focus-Microsoft)
  • Re: Help with Logon Script
    ... Thanks Pegasus - but - this server is NOT a domain controller. ... Remote Users access server with Remote Desktop Connection ... I can place this batch file on the root drive of the server, ...
    (microsoft.public.scripting.vbscript)
  • RE: SBS 2003 sudden services problem over router based vpn
    ... I understand that your remote cannot receive POP3 emails through VPN ... SBS Server through routers. ...
    (microsoft.public.windows.server.sbs)
  • RE: Download connection Manager through RWW
    ... the issue may occur due to the Remote VD is ... Then please rerun the CEICW wizard and Configure Remote access wizard ... Start Internet Explorer. ... Since the Symantec anti-virus application installed on the server, ...
    (microsoft.public.windows.server.sbs)