Petri IT Knowledgebase Forums
 

Petri.co.il forums Home Forums Start Page Forums Frequently Asked Questions FAQ Member List Members List
Go Back   Petri IT Knowledgebase Forums > Microsoft Networking Services > Terminal Services
Petri.co.il is happy to award auglan the title of Most Valuable Member !!!
Register Calendar Calendar Search Petri IT Knowledgebase Forums Search Todays Posts Today's Posts Mark Forums Read

Notices

Audit user activity in terminal server session

Audit user activity in terminal server session

this thread has 9 replies and has been viewed 2084 times

Closed Thread
 
Thread Tools Search this Thread Display Modes
  #1  
Old 1st August 2012, 11:40
hetfield hetfield is offline
Casual
Casual
 
 Join Date: Oct 2011
  6 month star 12 month star
 Posts: 17
 Reputation: hetfield is on a distinguished road (10)
Default Audit user activity in terminal server session

Hi,

I am trying to find a way to audit who is logged in to a server, how long they have been logged in for and what the idle time is. We are running a mixture of Server 2003/2008 environments but our remote server is running 2003.

I'd like to be able to specify dates/times to retrieve this information when needed. The main purpose is to ensure staff who are 'working from home' are actually working and not 'working'. Is there a piece of software, or a setting I can use or turn on to get this kind of info?

Any other suggestions would be great!

Thanks.
  #2  
Old 1st August 2012, 12:30
wullieb1 wullieb1 is offline
Moderator
 
 Join Date: Jul 2005
  6 month star 12 month star
 Location: Bris Vegas, Australia
 Posts: 6,384
 Reputation: wullieb1 is a splendid one to beholdwullieb1 is a splendid one to beholdwullieb1 is a splendid one to beholdwullieb1 is a splendid one to beholdwullieb1 is a splendid one to beholdwullieb1 is a splendid one to behold (684)
Default Re: Audit user activity in terminal server session

Have a look at http://www.observeit-sys.com/

We're looking at implementing it in our org to safeguard what happens to servers.
  #3  
Old 1st August 2012, 12:35
Ossian Ossian is online now
Administrator
 
 Join Date: Nov 2003
  6 month star 12 month star
 Location: Bonnie Scotland
 Posts: 15,113
  Send a message via Skype™ to Ossian
 Reputation: Ossian has much to be proud ofOssian has much to be proud ofOssian has much to be proud ofOssian has much to be proud ofOssian has much to be proud ofOssian has much to be proud ofOssian has much to be proud ofOssian has much to be proud ofOssian has much to be proud ofOssian has much to be proud of (1300)
Default Re: Audit user activity in terminal server session

Moved to TS forum for better response
__________________
Tom Jones
MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
PhD, MSc, FIAP, MIITT
IT Trainer / Consultant
Ossian Ltd
Scotland

** Remember to give credit where credit is due and leave reputation points where appropriate **
  #4  
Old 1st August 2012, 22:53
MVP yuval14 yuval14 is offline
MVP
MVP
 
 Join Date: Oct 2003
  6 month star 12 month star
 Location: IL
 Posts: 1,999
  Send a message via MSN to yuval14
 Reputation: yuval14 is a glorious beacon of lightyuval14 is a glorious beacon of lightyuval14 is a glorious beacon of lightyuval14 is a glorious beacon of lightyuval14 is a glorious beacon of lightyuval14 is a glorious beacon of light (501)
Default Re: Audit user activity in terminal server session

You can use Quest monitoring tools or

http://www.lanaudit.net/product/13/t...server+monitor etc.
__________________
Best Regards,

Yuval Sinay

BA/MCSE/MCDBA/MCSA/MCT/MCTS/MCITP
/MVP/CCEA/CNA/A+/Security+/CCNP
/CISSP/DCSE/CCSE+/ITILF/MASE/HPCI/
JNCIA-SSL/JNCIA-EX

Shadowall Group CTO
http://www.shadowall.net
  #5  
Old 4th August 2012, 17:50
Dumber's Avatar
Dumber Dumber is offline
Moderator
 
 Join Date: Dec 2003
  6 month star 12 month star
 Location: The Netherlands
 Posts: 8,067
 Reputation: Dumber is a splendid one to beholdDumber is a splendid one to beholdDumber is a splendid one to beholdDumber is a splendid one to beholdDumber is a splendid one to beholdDumber is a splendid one to beholdDumber is a splendid one to behold (820)
Default Re: Audit user activity in terminal server session

Well I work a lot from home, probably more from home then from the office.
For sure I'm sometimes going to do things like grocery or such, but still I probably work about 50-60h a week. Secondly I never use my VPN to my office, in fact I'm mostly connected to my VPN within the lab environment. Personally I've no use of the business LAN

I do think it's also a matter of trust from the management towards the employees. Companies who implements flexible working strategy shouldn't manage based on the number of hours, but on performance. That's a different strategy which also my management needed to learn. After all, it's more important the job is done then someone is reading the newspaper on the office.

Therefore I'm not in favor of using monitoring software as it would make a violation of trust. Simply because I could open Word or whatever and put some weight on my keyboard to fake user input. At least I've user activity which would prevent me from falling into an idle session.

Recording screens or sessions might violate the privacy from the user by law, depending in which country, and you probably need to tell the users they are videotaped.
__________________
Marcel
Netherlands
http://www.phetios.com
http://blog.nessus.nl

MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
No matter how secure, there is always the human factor.
  #6  
Old 8th August 2012, 13:42
simonsays's Avatar
simonsays simonsays is offline
Member
Here to help
 
 Join Date: Nov 2006
  6 month star 12 month star
 Location: United Kingdom
 Posts: 456
 Reputation: simonsays is on a distinguished road (32)
Default Re: Audit user activity in terminal server session

I know this is a technical forum, but i agree with Dumber on this.
Having worked somewhere that used to regularly re-watch staff working (using Spector) it does appear to cause low moral more often than not.
Some staff are often more concerned about making mistakes and spending too much time researching problems then concentrating on their work freely.
As pointed out; log on, off and idle times can be adhered to anyway if someone wanted to make out they were working when they weren't.
  #7  
Old 9th August 2012, 13:30
wullieb1 wullieb1 is offline
Moderator
 
 Join Date: Jul 2005
  6 month star 12 month star
 Location: Bris Vegas, Australia
 Posts: 6,384
 Reputation: wullieb1 is a splendid one to beholdwullieb1 is a splendid one to beholdwullieb1 is a splendid one to beholdwullieb1 is a splendid one to beholdwullieb1 is a splendid one to beholdwullieb1 is a splendid one to behold (684)
Default Re: Audit user activity in terminal server session

While i understand what you guys are saying, and if it were me then i wouldn't do it, its not what the OP wanted.

For all we know this could already have been hashed out by the management team and HR and this is what they want.
  #8  
Old 9th August 2012, 13:59
simonsays's Avatar
simonsays simonsays is offline
Member
Here to help
 
 Join Date: Nov 2006
  6 month star 12 month star
 Location: United Kingdom
 Posts: 456
 Reputation: simonsays is on a distinguished road (32)
Default Re: Audit user activity in terminal server session

Quote:
Originally Posted by wullieb1 View Post
While i understand what you guys are saying, and if it were me then i wouldn't do it, its not what the OP wanted.

For all we know this could already have been hashed out by the management team and HR and this is what they want.
Fair point!
  #9  
Old 13th August 2012, 09:48
tehcamel's Avatar
tehcamel tehcamel is offline
Moderator
 
 Join Date: Mar 2009
  6 month star 12 month star
 Location: Melbourne
 Posts: 5,033
  Send a message via Skype™ to tehcamel
 Reputation: tehcamel is a name known to alltehcamel is a name known to alltehcamel is a name known to alltehcamel is a name known to alltehcamel is a name known to alltehcamel is a name known to all (557)
Default Re: Audit user activity in terminal server session

there's also Spector360....
__________________

IT Support for businesses. Australian IT Support
Adept Small Business IT
Passionate about IT Support

Please do show your appreciation to those who assist you by leaving Rep Point
Posting from a BB Playbook - please excuse my typing
  #10  
Old 15th August 2012, 11:58
Dumber's Avatar
Dumber Dumber is offline
Moderator
 
 Join Date: Dec 2003
  6 month star 12 month star
 Location: The Netherlands
 Posts: 8,067
 Reputation: Dumber is a splendid one to beholdDumber is a splendid one to beholdDumber is a splendid one to beholdDumber is a splendid one to beholdDumber is a splendid one to beholdDumber is a splendid one to beholdDumber is a splendid one to behold (820)
Default Re: Audit user activity in terminal server session

Quote:
Originally Posted by wullieb1 View Post
While i understand what you guys are saying, and if it were me then i wouldn't do it, its not what the OP wanted.

For all we know this could already have been hashed out by the management team and HR and this is what they want.
Although this is a technical forum, I do think you should point them on the other side of the medallion when there is no mention of it. IMHO a lot of system administrators want to see to much although there is no need for it.

If it is hashed out, then well there are indeed certain solutions. However implementing a flexible working strategy do require a change of mind from the management as well. Management from my company found it quite hard to adapt it, but they did.
__________________
Marcel
Netherlands
http://www.phetios.com
http://blog.nessus.nl

MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
No matter how secure, there is always the human factor.
Closed Thread


Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
How can I make my clipboard works between Terminal server session and my desktop ? Albertwt Windows Server 2000 / 2003 6 25th February 2011 03:14
How to Audit Remote Users in RDP Session [Was: monitoring] axa2001ro Windows Server 2000 / 2003 4 12th September 2009 14:53
Terminal Server user cannot reconnect to 1st session humbletech99 Terminal Services 10 13th November 2008 21:32
Cannot get terminal session to vm server shergar VMware Virtualization 2 14th March 2008 17:44
2000/2003 ExMerge permissions in a Terminal Server session Menneset Exchange 2000 / 2003 2 13th January 2008 03:03


All times are GMT +3. The time now is 16:20.

Steel Blue 3.5.4 vBulletin Style ©2006 vBEnhanced
Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2013, Jelsoft Enterprises Ltd.
 

Valid XHTML 1.0!   Valid CSS!

Copyright 2005 Daniel Petri