Solved

Tracking user activity on a Small Business Server 2003 network

Posted on 2008-10-13
2
1,066 Views
Last Modified: 2012-05-05
I've been asked to track through the system and find out from the logs when a user has logged on and off since 15th. September.  I'm also increasingly getting requests to find out what files have been modified by particular users, etc.  Can anybody recommend how I would go about monitoring all the network activity, and if there's anything I can use to search through the volumes of activity that would be generated?  Also, are there any settings that aren't turned on by default in SBS 2003 that I could switch on?
0
Comment
Question by:Techdivision
2 Comments
 
LVL 95

Accepted Solution

by:
Lee W, MVP earned 250 total points
ID: 22708160
You can look into the event logs on the workstation for when they logged on and off.  Otherwise, to track file usage, you would need to enable auditing.  Even then, Auditing only provides basic information.  Depending on how serious you are about tracking activity, you may be better off using a product like DeviceLock - www.devicelock.com which can track with fine detail many activities and prevent (or make VERY difficult) unauthorized activities involving copying, etc.
0
 
LVL 38

Assisted Solution

by:Philip Elder
Philip Elder earned 250 total points
ID: 22714199
Enable Group Policy object level auditing:
http://technet.microsoft.com/en-us/library/cc757864.aspx
You can audit access to files, folders, registry keys, and system services.
Keep in mind that the auditing process can be CPU intensive ... so balance what you want audited with the server's capabilities.
Philip
0

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

I've often see, or have been asked, the question about the difference between the Exchange 2010 SP1 version, available as part of Small Business Server (SBS) 2011, and the “normal” Exchange 2010 SP1 Standard. The answer to the question is relativ…
I work for a company that primarily works with small businesses as their outsourced IT vendor. As such the majority of these customers utilize some version of Small Business Server. Due to the economics of running a small business, many of these cus…
In an interesting question (https://www.experts-exchange.com/questions/29008360/) here at Experts Exchange, a member asked how to split a single image into multiple images. The primary usage for this is to place many photographs on a flatbed scanner…
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…

733 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question