how to i see a user's activity?
I think one of my users is trying to log into my server. How can i check a user's activity on sbs 2003?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Yes its a 1 2 3 process, no reboot.
You can configure the system to log the successful or/and unsuccessful logins so you can view it into the event viewer or export it to another system, for example via syslog with a tool like snare or similar, to further review or to be processed in real time.
Try this:
Run -> mmc.exe
File -> Add or remove snap-in
Add
Group Policy Object Editor
Add
Check local system
Finish
Close
Accept
Then browse to:
Local Policy -> Machine configuration -> Windows configuration -> Security configuration -> Local policies -> Audit Policy
Then configure the audit for the items you need, for example the login.
ASKER