Solved

Administrator login nofitication

Posted on 2013-06-26
7
163 Views
Last Modified: 2013-08-21
I want to be notified via email if someone logs in using the administrator account to either the server or exchange.   I don't want to parse logs.  I want it to be auto-magic...How can I set this up?

Windows Server 2008 with all patches and using Exchange 2008

Thanks in advance..
0
Comment
Question by:aviator21114
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 3
7 Comments
 
LVL 27

Expert Comment

by:Jason Watkins
ID: 39277951
At some point a log or two may have to be parsed. This page covers a method using a login script

http://community.spiceworks.com/topic/200563-send-an-email-alret-whenever-domain-admin-has-loged-in-in-any-macchine
0
 

Author Comment

by:aviator21114
ID: 39278079
Just to be clear I want to trigger an email when someone uses the administrator "administrator" login not necessarily when someone logs in who is an administrator.
0
 
LVL 27

Expert Comment

by:Jason Watkins
ID: 39278104
Right. Change the scope of the script to target the administrator account and not the domain admins group. You could obfuscate the administrator account for added security by renaming it to something else.
0
Ransomware: The New Cyber Threat & How to Stop It

This infographic explains ransomware, type of malware that blocks access to your files or your systems and holds them hostage until a ransom is paid. It also examines the different types of ransomware and explains what you can do to thwart this sinister online threat.  

 

Author Comment

by:aviator21114
ID: 39278221
Could you post details on your comment?  I'm not sure I follow it completely.... also, thank you for your prompt reply to my query..
0
 
LVL 27

Accepted Solution

by:
Jason Watkins earned 500 total points
ID: 39278237
~~ From the web-site ~~

Create new GPO
Under Security Filtering add User or group
Create / Add VBS script to login script (code below)

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ \\\\\\\\\\\
' A login Script to email the current username and computername to an email address.
'-------------------------------------------------------------------------------
' Initialization - Get command line arguments and declare variables & constants
'-------------------------------------------------------------------------------
Option Explicit
Dim objEmail
Dim mbAnswer
Dim attFName
Dim oShell
Dim user
Dim comp

'-------------------------------------------------------------------------------
' Main script
'-------------------------------------------------------------------------------

Set oShell = CreateObject( "WScript.Shell" )
user=oShell.ExpandEnvironmentStrings("%UserName%")
comp=oShell.ExpandEnvironmentStrings("%ComputerNam e%")

' Create the message object using CDO
Set objEmail = CreateObject("CDO.Message")


' change the 5 lines below to the crrect settings for your system
' probably only the first, second and last actually need changing, (2 * Email address, Exchange server name)
' the other 2 lines are just for customisation.
' Assign message properties (To, From, Subject, etc.)

' The addres you want to be sending from
objEmail.From = "user@domain.co.uk"
' The addres you want to be sending to - the admin monitoring group
objEmail.To = "imonitoryou@domain.co.uk;yourbossmonitorsyou@domain.co.uk;Hr @domain.co.uk"
' The text to appear in the subject of the email
objEmail.Subject = "Domain Admin monitoring Network Logon"
' The text body of the message. Currently shows which user has logged in to which machine no.
objEmail.Textbody = "User " & user & " Has Logged in to machine no " & comp
' change the myexchservername to the network name of your exch server.
objEmail.Configuration.Fields.Item ("http://schemas.microsoft.com/cdo/configuration/smtpserver";) = "Exchange Server Name"
' Assign additional message properties, update the object, and send the message
objEmail.Configuration.Fields.Item ("http://schemas.microsoft.com/cdo/configuration/sendusing";) = 2
objEmail.Configuration.Fields.Item ("http://schemas.microsoft.com/cdo/configuration/smtpserverport";) = 25
objEmail.Configuration.Fields.Update
objEmail.Send
0
 

Author Comment

by:aviator21114
ID: 39278316
Thank you... let me digest this
0
 
LVL 27

Expert Comment

by:Jason Watkins
ID: 39278326
Sure. It can be alot to take in
0

Featured Post

Are your AD admin tools letting you down?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Read this checklist to learn more about the 15 things you should never include in an email signature.
This article explains how to install and use the NTBackup utility that comes with Windows Server.
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…

710 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question