Monitor super user activity

Posted on 2014-08-14
Last Modified: 2014-08-17
I need to inquire about how can I moniter the activity of domain admins. In our company, We are 3 users with domain admins privielage and need to audit all their activities such as log in, log off, file access, etc
Question by:ramziabk
    1 Comment
    LVL 23

    Accepted Solution


    This would mean you have to setup up and auditing policy. The following link is a good way to start. But the first thing to start with (imho) is make sure that the domain admin account is not being used and that you all have your own domain admin accounts attached to your names. THis way you can easily see who did what.

    Also, when doing auditing policy, keep in mind not to audit to much otherwise you want have an overview of what is happening (Specially with file access, login sessions is not that much logging).

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    How your wiki can always stay up-to-date

    Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
    - Increase transparency
    - Onboard new hires faster
    - Access from mobile/offline

    INTRODUCTION The purpose of this document is to demonstrate the Installation and configuration of the Data Protection Manager product. Note that this demonstration was prepared on the basis of Windows OS is 2008 R2 and DPM 2010. DATA PROTECTI…
    Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
    This tutorial will walk an individual through the steps necessary to configure their installation of BackupExec 2012 to use network shared disk space. Verify that the path to the shared storage is valid and that data can be written to that location:…
    This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…

    737 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    20 Experts available now in Live!

    Get 1:1 Help Now