how to i see a user's activity?

I think one of my users is trying to log into my server. How can i check a user's activity on sbs 2003?
Bigmerv307Asked:
Who is Participating?
 
loki_lokiConnect With a Mentor Commented:
enable auditing in the local security policy in the administrative tools in control panel.  You can audit for login failures and see who is trying to access the server.
0
 
Bigmerv307Author Commented:
Thx for the quick response. Do i need to reboot the server after this is enabled? Is this a 1 2 3 process?
0
 
meko72Commented:
Yes its a 1 2 3 process, no reboot.

 
0
 
hermidaeCommented:

You can configure the system to log the successful or/and unsuccessful logins so you can view it into the event viewer or export it to another system, for example via syslog with a tool like snare or similar, to further review or to be processed in real time.

Try this:

Run -> mmc.exe
File -> Add or remove snap-in
Add
Group Policy Object Editor
Add
Check local system
Finish
Close
Accept

Then browse to:
Local Policy -> Machine configuration -> Windows configuration -> Security configuration -> Local policies -> Audit Policy

Then configure the audit for the items you need, for example the login.
 
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.