I've been trying to find an affordable, easy to use, Security Event Management (SEM) system for my customers, and have had absolutely zero luck. Apparantly, affordable, easy to use, and SEM only occur in the same sentence on my blog (darnitol.blogspot,com). Systems I looked into costed from around $1,000/year (this is for 10 PC's and a server) to upwards to $100,000 (I didn't look at that one for long), and seemed overwhelming to say the least. What I need is a system that does a few things:
1. Tells me who logged onto which computer, when, and when they logged off.
2. Tells me if somebody logged on during a time they do not typically log on, or if someone used a computer that they don't normally use.
3. Watches a few directories on the server, and lets me know which and when files are accessed, changed, or deleted.
4. Is simple enough to use that any Business Office Manager or Facility Admnistrator can use it.