sXmont1j6
asked on
Monitor a users' activity on the network.
I have been tasked to setup monitoring on a user.
- FIles accessed by said user
- Folders accessed
- Any applications downloaded..
- Etc...Etc...
And the output reports will need to be "clean"
- FIles accessed by said user
- Folders accessed
- Any applications downloaded..
- Etc...Etc...
And the output reports will need to be "clean"
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Considering this is in the Active Directory section, In making an assumption you would like to do this via AD or are at least curious if AD is capable of this.
In my experience, AD is a poor solution for monitoring or controlling activity like you describe. Yes, you can set up security auditing to capture flie and object access and such, but you cannot set it up to trigger on a PER USER basis. It will be set up for everyone and you will need to mine the security logs for specific events, which isn't trivial.
just my $.02
In my experience, AD is a poor solution for monitoring or controlling activity like you describe. Yes, you can set up security auditing to capture flie and object access and such, but you cannot set it up to trigger on a PER USER basis. It will be set up for everyone and you will need to mine the security logs for specific events, which isn't trivial.
just my $.02
ASKER
I want to be able to track what a user is accessing on the network. in terms of DB and files\folders. Obviously, I will need third party utility.
You might try DriveLock - https://www.drivelock.com/
You can try to use this tool: https://www.netwrix.com/auditor.html
It is reviewed in this website: https://4sysops.com/archives/netwrix-auditor-8-5-detect-investigate-unusual-user-behavior/
It is reviewed in this website: https://4sysops.com/archives/netwrix-auditor-8-5-detect-investigate-unusual-user-behavior/
ASKER