Solved

Administrator login nofitication

Posted on 2013-06-26
7
157 Views
Last Modified: 2013-08-21
I want to be notified via email if someone logs in using the administrator account to either the server or exchange.   I don't want to parse logs.  I want it to be auto-magic...How can I set this up?

Windows Server 2008 with all patches and using Exchange 2008

Thanks in advance..
0
Comment
Question by:aviator21114
  • 4
  • 3
7 Comments
 
LVL 27

Expert Comment

by:Jason Watkins
ID: 39277951
At some point a log or two may have to be parsed. This page covers a method using a login script

http://community.spiceworks.com/topic/200563-send-an-email-alret-whenever-domain-admin-has-loged-in-in-any-macchine
0
 

Author Comment

by:aviator21114
ID: 39278079
Just to be clear I want to trigger an email when someone uses the administrator "administrator" login not necessarily when someone logs in who is an administrator.
0
 
LVL 27

Expert Comment

by:Jason Watkins
ID: 39278104
Right. Change the scope of the script to target the administrator account and not the domain admins group. You could obfuscate the administrator account for added security by renaming it to something else.
0
Do You Know the 4 Main Threat Actor Types?

Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

 

Author Comment

by:aviator21114
ID: 39278221
Could you post details on your comment?  I'm not sure I follow it completely.... also, thank you for your prompt reply to my query..
0
 
LVL 27

Accepted Solution

by:
Jason Watkins earned 500 total points
ID: 39278237
~~ From the web-site ~~

Create new GPO
Under Security Filtering add User or group
Create / Add VBS script to login script (code below)

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ \\\\\\\\\\\
' A login Script to email the current username and computername to an email address.
'-------------------------------------------------------------------------------
' Initialization - Get command line arguments and declare variables & constants
'-------------------------------------------------------------------------------
Option Explicit
Dim objEmail
Dim mbAnswer
Dim attFName
Dim oShell
Dim user
Dim comp

'-------------------------------------------------------------------------------
' Main script
'-------------------------------------------------------------------------------

Set oShell = CreateObject( "WScript.Shell" )
user=oShell.ExpandEnvironmentStrings("%UserName%")
comp=oShell.ExpandEnvironmentStrings("%ComputerNam e%")

' Create the message object using CDO
Set objEmail = CreateObject("CDO.Message")


' change the 5 lines below to the crrect settings for your system
' probably only the first, second and last actually need changing, (2 * Email address, Exchange server name)
' the other 2 lines are just for customisation.
' Assign message properties (To, From, Subject, etc.)

' The addres you want to be sending from
objEmail.From = "user@domain.co.uk"
' The addres you want to be sending to - the admin monitoring group
objEmail.To = "imonitoryou@domain.co.uk;yourbossmonitorsyou@domain.co.uk;Hr @domain.co.uk"
' The text to appear in the subject of the email
objEmail.Subject = "Domain Admin monitoring Network Logon"
' The text body of the message. Currently shows which user has logged in to which machine no.
objEmail.Textbody = "User " & user & " Has Logged in to machine no " & comp
' change the myexchservername to the network name of your exch server.
objEmail.Configuration.Fields.Item ("http://schemas.microsoft.com/cdo/configuration/smtpserver";) = "Exchange Server Name"
' Assign additional message properties, update the object, and send the message
objEmail.Configuration.Fields.Item ("http://schemas.microsoft.com/cdo/configuration/sendusing";) = 2
objEmail.Configuration.Fields.Item ("http://schemas.microsoft.com/cdo/configuration/smtpserverport";) = 25
objEmail.Configuration.Fields.Update
objEmail.Send
0
 

Author Comment

by:aviator21114
ID: 39278316
Thank you... let me digest this
0
 
LVL 27

Expert Comment

by:Jason Watkins
ID: 39278326
Sure. It can be alot to take in
0

Featured Post

Do email signature updates give you a headache?

Do you feel like you are constantly making changes to email signatures? Are the images not formatting how you want them to? Want high-quality HTML signatures on all devices, including on mobiles and Macs? Then, let Exclaimer solve all your email signature problems today.

Join & Write a Comment

Utilizing an array to gracefully append to a list of EmailAddresses
Exchange server is not supported in any cloud-hosted platform (other than Azure with Azure Premium Storage).
This tutorial will walk an individual through the steps necessary to install and configure the Windows Server Backup Utility. Directly connect an external storage device such as a USB drive, or CD\DVD burner: If the device is a USB drive, ensure i…
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…

706 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now