We help IT Professionals succeed at work.

How can I log ALL connection to my Windows 2003 server?

386 Views
Last Modified: 2013-12-04
I am an administrator on our business network.  My off-site collegue who has domain adminstration, tries and "tests" software on our live network.  As a result, he connects to my servers and runs his "test".  This causes a lot of issues, obviously.  All my Security log reports is the usual time, date, event id and I see their user name.  But what did they do?  The event reads "Privilege Use".  Ok, what privilege use did they do?

I would like to know if there is a "capturing" software that can tell me more when they connect.

Thanks.
Comment
Watch Question

Commented:
This one is on us!
(Get your first solution completely free - no credit card required)
UNLOCK SOLUTION
Maybe a screen recorder would work since he is probably doing a remote desktop to install software or changing settings or something.

I don't have a lot of experience with any screen recorded except Techsmith but I think it's only for creating videos.

They System log usually shows programs getting installed and uninstalled, if I remember right.  Or maybe that's restore point log.

Either way, I would look at screen recorders to 'understand' what he's doing.

hope that helps.
TolomirAdministrator
CERTIFIED EXPERT
Top Expert 2005
Commented:
This one is on us!
(Get your first solution completely free - no credit card required)
UNLOCK SOLUTION
Rick ShainkSystems Administrator

Author

Commented:
WireShark seems to be something I can use and will try.  - Makes sense.

Auditing Privilege use I have to think about.  Because it uses group policies it would alert the rest of my team.  I need to think about this.

- Thanks.
Unlock the solution to this question.
Join our community and discover your potential

Experts Exchange is the only place where you can interact directly with leading experts in the technology field. Become a member today and access the collective knowledge of thousands of technology experts.

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.