What is the best way to audit the activities of a specific user?

Posted on 2004-11-18
Last Modified: 2010-04-14
Hello Experts!

I am going away on vacation for Thanksgiving and for three days I am bestowing the Domain Admin privilege to one of my users "just in case" they need to troubleshoot something.

How can I track everything this user does while I'm gone?
This is on a Windows 2003 GC/DC...

Question by:neomage23
    LVL 95

    Accepted Solution

    Enable security auditing in the domain policy.

    That aside, why not just create another admin account and password and put the password in a sealed envelope.  If they NEED access to it, they have it, but they better have a good reason why they needed access to it...

    Even then, you'll not be able to log EVERYTHING they do.
    LVL 11

    Assisted Solution

    I would make sure that you are auditing success and failures for "audit directory service access" in the "domain controller" security policy.  By doing this, any AD object that is added, deleted, change will be put in the security log on the DC.  Also, you may need to increase the security log file size on the DC.  If so, right-click the security log on the DC and go to properties, or you can do it on the domain controller security policy.
    LVL 6

    Author Comment

    Thanks guys...nothing mysterious happenend while I was away! Split Points!
    LVL 11

    Expert Comment

    Glad we could assist!  Thanks for using EE!

    Featured Post

    Highfive + Dolby Voice = No More Audio Complaints!

    Poor audio quality is one of the top reasons people don’t use video conferencing. Get the crispest, clearest audio powered by Dolby Voice in every meeting. Highfive and Dolby Voice deliver the best video conferencing and audio experience for every meeting and every room.

    Join & Write a Comment

    Suggested Solutions

    NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
    In this post we will learn how to connect and configure Android Device (Smartphone etc.) with Android Studio. After that we will run a simple Hello World Program.
    Internet Business Fax to Email Made Easy - With eFax Corporate (, you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…
    Here's a very brief overview of the methods PRTG Network Monitor ( offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

    745 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    19 Experts available now in Live!

    Get 1:1 Help Now