Solved

how to i see a user's activity?

Posted on 2011-02-22
4
522 Views
Last Modified: 2012-05-11
I think one of my users is trying to log into my server. How can i check a user's activity on sbs 2003?
0
Comment
Question by:Bigmerv307
4 Comments
 
LVL 4

Accepted Solution

by:
loki_loki earned 500 total points
ID: 34952809
enable auditing in the local security policy in the administrative tools in control panel.  You can audit for login failures and see who is trying to access the server.
0
 

Author Comment

by:Bigmerv307
ID: 34952850
Thx for the quick response. Do i need to reboot the server after this is enabled? Is this a 1 2 3 process?
0
 
LVL 9

Expert Comment

by:meko72
ID: 34952874
Yes its a 1 2 3 process, no reboot.

 
0
 
LVL 1

Expert Comment

by:hermidae
ID: 34952896

You can configure the system to log the successful or/and unsuccessful logins so you can view it into the event viewer or export it to another system, for example via syslog with a tool like snare or similar, to further review or to be processed in real time.

Try this:

Run -> mmc.exe
File -> Add or remove snap-in
Add
Group Policy Object Editor
Add
Check local system
Finish
Close
Accept

Then browse to:
Local Policy -> Machine configuration -> Windows configuration -> Security configuration -> Local policies -> Audit Policy

Then configure the audit for the items you need, for example the login.
 
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This guide is intended to provide step by step instructions on how to migrate from Small Business Server 2003 to Small Business Server 2011. NOTE: This guide has been written using the preview version of SBS2011 therefore some of the screens may …
Because virtualization becomes more and more common, and, with Microsoft Hyper-V included in Windows Server at no additional costs, and, most server hardware nowadays is more than capable of running a physical Small Business Server (SBS) 2008 or 201…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

803 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question