Monitor User Remotely.

  • Thread starter Thread starter Tom
  • Start date Start date
T

Tom

I have 1 user, who keeps installing priate sofwtare, virused software,
or trojans..

We keep telling him the restrictions of business systems.

Is there any way we can remotely monitor him, without him seeing that
we are watching ??

All staff are advised that the Pc could be monitored, so we have no
problems with permission or privacy..

Ideally, we don't want him to know that we are monitoring him..

Any IDEAS >>???
 
There are various things that you can do. A keyboard logger will record
activity [check legal and personel first], auditing of process tracking on
the computer may be helpful but will generate a lot of events in the
security log in Event Viewer that are not the easiest to interpret, viewing
temporary files/temporary internet files and history folder can be done
remotely via administrator share, and folder files have creation timestamps
and ownership information.

Having said that, I have to wonder if this user needs to be a power user or
administrator on his computer. Making him a regular user may stop a lot of
that. I would also enable auditing of logon events on his computer so that
you can track his usage and other users time on his computer. If he is a
local administrator however, he can clear the security log. You may want to
give him a pristine installation and then back it up to have as evidence or
proof that at a particular point in time the computer was clean. That along
with the security log files will help you build a case against him. ---
Steve
 
Steven L Umbach wrote / skrev:
Having said that, I have to wonder if this user needs to be a power user or
administrator on his computer. Making him a regular user may stop a lot of
that. I would also enable auditing of logon events on his computer so that
Click to expand...

This seems like the most straightforward thing. Or are you trying to
collect evidence of wrongdoing for some specific reason?
 
VNC..

Doesn't that show the user that we are connected.. ?

I don't think you can hide the Taskbar Icon or the process within Task
Manager
Click to expand...

We need to actually see HIM doing it !

Being able to prove that software has been installed, doesn't prove it was
him.

VNC, does what we want, we can see what is happening, BUT he know if VNC is
active..

Any other ideas ?
 
Back
Top