Re: users activity

You want to make sure that auditing of account logon and or logon events is
enabled in the Local Security Policy or whatever domain level policy is
enforcing auditing for your domain. By default auditing of logon events
should be enabled on XP Pro and Windows 2003 servers. To audit when a user
logos onto the domain you need to enable auditing of account logon events in
Domain Controller Security Policy. The links below explain more including
the logon types you can see in logon events.

Steve

http://support.microsoft.com/default.aspx?scid=KB;en-us;q248260
http://www.microsoft.com/technet/security/topics/auditingandmonitoring/securitymonitoring/default.mspx
http://www.windowsecurity.com/articles/Logon-Types.html

"Osyris" <Osyris@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:C7C46F96-3367-401F-A0F3-0D77CCAB170E@xxxxxxxxxxxxxxxx
dear all ,

this is my question..

Is there any way to watch users activity in a LAN?
For instance i want to know when a user log in the server,when was the
last
time user log in and inforfation like that..
Can this be done due to active directory or needs some other program?

thanks



.

Relevant Pages

  • Re: Monitoring user access.
    ... Security Policy. ... In the right hand pane, right click on Audit logon events. ... Keep in mind that if you're running XP Professional, enabling auditing of logon ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Authentication Auditing
    ... > only show in the security log of the domain computer itself - not the ... > it indeed does show that auditing of logon events is enabled for success ... It is enabled but the effective setting dispalys as "No Auditing". ...
    (microsoft.public.win2000.security)
  • Re: Authentication Auditing
    ... What may be happening is that another Group Policy has auditing defined for ... logon events such as at the Organizational Unit Level. ... see what it is for auditing and change it to suit your needs. ... >> Then try clearing the current security log to make sure it is not full ...
    (microsoft.public.win2000.security)
  • Re: Monitor file system changes
    ... There is AD auditing, and then there's file system and other resource auditing. ... Audit logon events: Security Configuration Editor; ... If both account logon and logon audit policy categories are enabled, logons that use a domain account generate a logon or logoff event on ... ...
    (microsoft.public.windows.server.active_directory)
  • Re: Remote Desktop auditing
    ... XP Pro has the same auditing capabilities as Windows 2003 Server other than ... You would want to enable auditing of ... account logon events and maybe logon events in Local Security Policy. ...
    (microsoft.public.windowsxp.security_admin)