Security Basics mailing list archives
Re: Monitoring of Admin logins
From: "Buz Dale" <buz.dale () usg edu>
Date: Tue, 10 Apr 2007 13:24:48 -0400
I would think that a syslog server and some tools would be able to do that. I'd also recommend giving people admin equivalent accounts instead of letting them log in as "admin." If you make sure they have no access to the syslog server you can make sure you have an accurate record of who is doing what. Luck, Buz On 4/10/07, Sohail Sarwar <ssarwar () ecredit com> wrote:
Hi there, I am assuming this have been done, but how ? I would like to get notified when a user logs in to my domain as an admin (Administrator) I have several people who are using the admin account, and I would like to setup something so that it notifies me via and email that a specific person has logged in to the domain controller or windows 2003 servers as the administrator. I guess something like who the user is and from where.. Is there such a thing ? Thanks, Sohail
-- Buz Dale buz.dale () usg edu IT Security Specialist 1-888-875-3697 (In GA) 1-706-583-2005 Office of Information and Instructional Technology University System of Georgia GMT -5:00
Current thread:
- Re: Audit Windows files/folders, (continued)
- Re: Audit Windows files/folders Tornado (Apr 09)
- RE: Audit Windows files/folders Scott Ramsdell (Apr 09)
- Re: Audit Windows files/folders Rob Creely (Apr 10)
- Re: Audit Windows files/folders TStark (Apr 10)
- RE: Audit Windows files/folders J.M. Seitz (Apr 10)
- Message not available
- Fwd: Audit Windows files/folders kevin fielder (Apr 11)
- RE: Audit Windows files/folders Scott Ramsdell (Apr 09)
- Re: Audit Windows files/folders Tornado (Apr 09)
- Monitoring of Admin logins Sohail Sarwar (Apr 10)
- RE: Monitoring of Admin logins Petter Bruland (Apr 10)
- RE: Monitoring of Admin logins Dixon, Wayne (Apr 10)
- Re: Monitoring of Admin logins Buz Dale (Apr 10)
- Re: Monitoring of Admin logins Steven Adair (Apr 11)
- Re: Monitoring of Admin logins Steven Hollingsworth (Apr 11)