I need to monitor the activity of a fellow domain admin. I need to understand his access patterns and ensure that I am aware of all accounts that he uses.
I have enabled all auditing on the "Default Domain Controllers GPO and can track events there. What else can I do or do I need to look at ?
Is it possible to audit all account login activity from a named workstation through policy ?
Is there a recommended product I can use ?
2K3 domain.
Start Free Trial