how to track the users...in the domain

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

I' m using windows 2000 server as our domain contoller. there are shared
folders with full permissions read/write as it is used for our
applications. this shared folders is mapped to all users as various drives.
recently one of the user deleted a file from this folder. i checked the event
viewer of the server but couldnot find the users.

is there any way to get a report or track the users as they logon into the
domain by the administrator .
 
You might want to look into auditing.

Auditing is discussed in multiple MS planning/deployment guides,
as well as in the Windows built-in help system.
You may audit many things, including
1. login and logout success and/or failure, at both the domain
controller level and at the non-DC sharing server level if
that is different from the DCs of the domain
2. NTFS filesystem actions, including only successful delete

After auditing is set up (you need to specify what should cause
an audit record in the security event log) there will be a record.
For action before auditing is defined, there is none.

Roger
 
You might want to look into auditing.

Auditing is discussed in multiple MS planning/deployment guides,
as well as in the Windows built-in help system.
You may audit many things, including
1. login and logout success and/or failure, at both the domain
controller level and at the non-DC sharing server level if
that is different from the DCs of the domain
2. NTFS filesystem actions, including only successful delete

After auditing is set up (you need to specify what should cause
an audit record in the security event log) there will be a record.
For action before auditing is defined, there is none.

Roger
Click to expand...

In task manager, you will also be able to find the current active and
inactive user sessions.
 
Back
Top