• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 535
  • Last Modified:

how to i see a user's activity?

I think one of my users is trying to log into my server. How can i check a user's activity on sbs 2003?
0
Bigmerv307
Asked:
Bigmerv307
1 Solution
 
loki_lokiCommented:
enable auditing in the local security policy in the administrative tools in control panel.  You can audit for login failures and see who is trying to access the server.
0
 
Bigmerv307Author Commented:
Thx for the quick response. Do i need to reboot the server after this is enabled? Is this a 1 2 3 process?
0
 
meko72Commented:
Yes its a 1 2 3 process, no reboot.

 
0
 
hermidaeCommented:

You can configure the system to log the successful or/and unsuccessful logins so you can view it into the event viewer or export it to another system, for example via syslog with a tool like snare or similar, to further review or to be processed in real time.

Try this:

Run -> mmc.exe
File -> Add or remove snap-in
Add
Group Policy Object Editor
Add
Check local system
Finish
Close
Accept

Then browse to:
Local Policy -> Machine configuration -> Windows configuration -> Security configuration -> Local policies -> Audit Policy

Then configure the audit for the items you need, for example the login.
 
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Tackle projects and never again get stuck behind a technical roadblock.
Join Now