?
Solved

Best keylogger

Posted on 2008-10-08
5
Medium Priority
?
559 Views
Last Modified: 2010-03-17
I have a users account which keeps locking out. It does this sporadically when the user locks the screen.
The User has had their account recreated in Active Directory but it still keeps locking out.
The user has had all their PC exquipment completely swapped out ( PC, keyboard etc )
The user is using windows XP
I have stood over the user, watched the user lock the screen and when they try to unlock the PC the account has locked out.

I want to install a keylogger ( with her consent ) to try see if something is locking out her account,
but any of the ones I have tried do not record when at the "Computer locked - press Ctrl-Alt-Del to unlock" screen

Can anyone offer some advice on
1.The problem
2.What keylogger to use
0
Comment
Question by:Trywas
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
5 Comments
 
LVL 17

Accepted Solution

by:
houssam_ballout earned 2000 total points
ID: 22668247
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 22668594
0
 
LVL 4

Expert Comment

by:Chris James
ID: 22668778
I agree with houssam ballout, I think perfect keylogger is really good.
0
 
LVL 23

Expert Comment

by:Danny Child
ID: 22669590
Are they logged on to a dfferent pc (or server??) still?  Have they mapped a drive using a password which has since expired?
 - and check the Security Logs on the Domain Controller too....

I'd also check the Screensaver settings on the pc too - are they trying to configure their own password here?

more suggestions:
http://www.experts-exchange.com/Networking/Misc/Q_21980304.html
 - I'd say the Outlook one and the Delete Local Profile one would be worth a spin...

0

Featured Post

[Webinar] Lessons on Recovering from Petya

Skyport is working hard to help customers recover from recent attacks, like the Petya worm. This work has brought to light some important lessons. New malware attacks like this can take down your entire environment. Learn from others mistakes on how to prevent Petya like worms.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article demonstrates probably the easiest way to configure domain-wide tier isolation within Active Directory. If you do not know tier isolation read https://technet.microsoft.com/en-us/windows-server-docs/security/securing-privileged-access/s…
Microsoft Office 365 is a subscriptions based service which includes services like Exchange Online and Skype for business Online. These services integrate with Microsoft's online version of Active Directory called Azure Active Directory.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …
Suggested Courses

764 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question