Re: User logging

Ramesh <ramesh2020@gmaildotcom> wrote:
Lanwench, i had a couple of concerns .. would enabling audit make a
major impact to teh system performance?

Normally, shouldn't....but be careful what auditing you choose to enable!

I'm really thinking a keylog app is more what you need.


would the length logs occupy
large disk space.

Shouldn't, either, if you set your event logs to reasonable sizes before
overwrite occurs.

Ramesh

"Lanwench [MVP - Exchange]"
<lanwench@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
message news:%23HaU$KdAIHA.3508@xxxxxxxxxxxxxxxxxxxxxxx
Ramesh <ramesh2020@gmaildotcom> wrote:
Hi,

Is there a way i could see a log of which user logged on when in the
PC?

Does every user have his/her own login, with a password nobody else
knows, and are these accounts members of the local Users group only?
Do users log themselves out of the computer when done with their
work? Does the computer's built-in Administrator account have a
password only you know?

If the above are true, you can enable auditing to see some of what
you wish, but even that may not give you sufficientinformation.

Plus even better if i could see what programs were run by that
user.

Nope.

Do we have such logging facility in XP?

Not for anything besides logins and specific file access if you wish
to enable that (and look through the lengthy logs).

Or could someone
recommend any third party software which could do this?

You might look at some of the "net nanny" programs or keyloggers.

Purpose is to monitor my staff using the office PC. I suspect some
misuse is happening out of office hours.

Thanks for any help.
Ramesh

Hope this helps. However, I must add that if it's after office
hours, and the "misuse" doesn't involve anything illegal, it seems
odd to me that you'd be bothered about this.



.

Relevant Pages

  • Re: log file how to?
    ... Once auditing is enabled, you might also try ElUnDump for html-based reports ... of Windows event logs. ... > You can enable auditing on your computers however for what you would want ...
    (microsoft.public.win2000.networking)
  • RE: Trace of 139 attack?
    ... Enabling auditing is as important as what you enable. ... data in the logs, as well. ... That way, if the attacker ... Make international calls for as low as $.04/minute with Yahoo! ...
    (Focus-Microsoft)
  • Re: Keep admins off of client machines
    ... but if you have your auditing set correctly there will be ... > monitor the event logs and then do some action such as e-mail or page you. ... > As part of your overall security you would have auditing on computer room ... > settings at what time, when they were turned back on and who was in the ...
    (microsoft.public.windows.server.sbs)
  • Re: Auditing folders
    ... I'm not sure of the value of auditing successful file ... Those are going to fill up your logs, ... If you audit for a custom group that only ... >> problem is our event log files are huge by the end of the day because ...
    (microsoft.public.security)