Member_2_3352217
asked on
User Accessing Server 2008 R2
I suspect a user might be playing around in Active Directory and wondering if there is a way to find out who has been logging on to the server? She had reset her password for the domain and I think she may have done that on her own without my permission - so want to see if she is indeed getting into the server somehow....is there a way to find out?
ASKER
wow a free tool that might help me figure this out- awesome - thanks - will try it out and see if it gives me the information I am looking for.
How are they accessing? RDP, VNC, Logmein, or physically?
ASKER
I don't know for sure - not physically logging in - would have to be RDP or VNC - something like that probably.
When the RDP in the user account should not have administrator priviledges.
Also time to change the VNC password. If they need to VNC setup VNC with a read only password give them that one.
Also time to change the VNC password. If they need to VNC setup VNC with a read only password give them that one.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
http://www.manageengine.com/products/active-directory-audit/user-logon-audit-reports.html