Monitoring RWW Connections on SBS Server

I want to see who has connected through RWW on my usage reports.  My usage report gives me Mailbox and OWA information but nothing regarding RWW.  

I have IIS checked on the usage report.  

merikmAsked:
Who is Participating?
 
ee_autoConnect With a Mentor Commented:
Question PAQ'd, 500 points refunded, and stored in the solution database.
0
 
DrDave242Commented:
From what I've read, there's no built-in RWW usage report.  There are third-party products for it, though.  The first one I ran across is RWWGuard, which looks like it does a few other things as well:

http://www.scorpionsoft.com/products/rwwguard/
0
 
merikmAuthor Commented:
where can you do access logging?  To see from an active directory standpoint, when people are logging on and what they are accessing.  Maybe as an alternative to RWW reporting.
0
Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

 
DrDave242Commented:
You'll need to enable auditing on the SBS server.  To do this, go to Start > Admin Tools > Domain Controller Security Policy.  Expand Local Policies and click Audit Policy.  You'll see nine different items in the right pane that you can enable as you please.  Since you're actually modifying a GPO with these settings, any changes won't take affect until Group Policies are updated.  You can wait for this to happen automatically, or you can force it with the gpupdate command.  Also note that any other DCs you have in this domain will be affected by these settings as well.  Finally, the actual audit events are recorded in the DC's security log, and enabling some audit policy settings (especially if you choose to audit successes and failures) can result in a LOT of events being logged.  This can make sifting through the security log cumbersome and can fill up the log completely.
0
 
merikmAuthor Commented:
so this is supposed to set all network accesses, like file access and such to show up in the security log?
0
 
DrDave242Commented:
Anything you enable in that policy will show up in the security log, yes.
0
 
merikmAuthor Commented:
is there any particular events that would show as web interactive logon/logoff tied with a particular user.  I am looking to recognize events for reporting.  to try to track the rww logon.
0
 
DrDave242Commented:
Sorry, I went on vacation and forgot about this when I returned.  I don't know if an RWW-based logon would show up any differently from a normal network logon in the log.  You may have to test it to see.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.