• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 150
  • Last Modified:

How to track administrator access, files touched and timelines

On an A/D network,  15 server ---  with several different administrator levels (administrators and then Domain adminstrators).  I have noticed that admins for H/R seems to have access to my server.  How can I track or trace -- where they accessed or looked on my server in the Event logs?
0
misterd
Asked:
misterd
  • 2
  • 2
3 Solutions
 
John HurstBusiness Consultant (Owner)Commented:
I think you must turn on Server Auditing to track this kind of information and it is not available if you have not got it turned on at this point.

If the various administrators are members of the administrators group, they can go anywhere they please and look at whatever they wish.
0
 
misterdAuthor Commented:
The must be a means to track who has logged on,( maybe not what they have done),  if they installed some software and deleted something.  I will check the server auditing
0
 
John HurstBusiness Consultant (Owner)Commented:
You can look in the terminal services section of server admin to see who is logged on but you need auditing to see who did log on and what they touched.
0
 
misterdAuthor Commented:
Nothing worked for me -- had to call in someone
0

Featured Post

Hire Technology Freelancers with Gigs

Work with freelancers specializing in everything from database administration to programming, who have proven themselves as experts in their field. Hire the best, collaborate easily, pay securely, and get projects done right.

  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now