?
Solved

Tracking user activity on a Small Business Server 2003 network

Posted on 2008-10-13
2
Medium Priority
?
1,069 Views
Last Modified: 2012-05-05
I've been asked to track through the system and find out from the logs when a user has logged on and off since 15th. September.  I'm also increasingly getting requests to find out what files have been modified by particular users, etc.  Can anybody recommend how I would go about monitoring all the network activity, and if there's anything I can use to search through the volumes of activity that would be generated?  Also, are there any settings that aren't turned on by default in SBS 2003 that I could switch on?
0
Comment
Question by:Techdivision
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 96

Accepted Solution

by:
Lee W, MVP earned 750 total points
ID: 22708160
You can look into the event logs on the workstation for when they logged on and off.  Otherwise, to track file usage, you would need to enable auditing.  Even then, Auditing only provides basic information.  Depending on how serious you are about tracking activity, you may be better off using a product like DeviceLock - www.devicelock.com which can track with fine detail many activities and prevent (or make VERY difficult) unauthorized activities involving copying, etc.
0
 
LVL 39

Assisted Solution

by:Philip Elder
Philip Elder earned 750 total points
ID: 22714199
Enable Group Policy object level auditing:
http://technet.microsoft.com/en-us/library/cc757864.aspx
You can audit access to files, folders, registry keys, and system services.
Keep in mind that the auditing process can be CPU intensive ... so balance what you want audited with the server's capabilities.
Philip
0

Featured Post

Get real performance insights from real users

Key features:
- Total Pages Views and Load times
- Top Pages Viewed and Load Times
- Real Time Site Page Build Performance
- Users’ Browser and Platform Performance
- Geographic User Breakdown
- And more

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I've often see, or have been asked, the question about the difference between the Exchange 2010 SP1 version, available as part of Small Business Server (SBS) 2011, and the “normal” Exchange 2010 SP1 Standard. The answer to the question is relativ…
I’m often asked about newer and larger USB drives connected to SBS2008 and 2011 failing Windows Server Backup vs the older USB drives not failing. As disk space continues to grow and drive technology change SBS2008 and some SBS2011 end up with the f…
Michael from AdRem Software explains how to view the most utilized and worst performing nodes in your network, by accessing the Top Charts view in NetCrunch network monitor (https://www.adremsoft.com/). Top Charts is a view in which you can set seve…
Add bar graphs to Access queries using Unicode block characters. Graphs appear on every record in the color you want. Give life to numbers. Hopes this gives you ideas on visualizing your data in new ways ~ Create a calculated field in a query: …

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question