RE: Remote monitoring

["Holtz,Robert" <Robert.Holtz () edwardjones com>]

If you're looking to monitor workstation to server activity you can use
the built in network monitor that comes with Windows.  Run it on the
server to watch and filter on the workstation you want to monitor.

To watch all traffic from a given workstation you will want to somehow
monitor their switch port.  This capability will depend heavily on what
types of switches you have in place.  You would forward a copy of all of
their port traffic to a "monitor" port that has a sniffer hooked to it.


 
 If you are not the intended recipient of this message (including attachments), or if you have received this message in 
error, immediately notify us and delete it and any attachments.  If you no longer wish to receive e-mail from Edward 
Jones, please send this request to messages () edwardjones com.  You must include the e-mail address that you wish not 
to receive e-mail communications.  For important additional information related to this e-mail, visit 
www.edwardjones.com/US_email_disclosure
 
-----Original Message-----
 

From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On Behalf Of WALI
Sent: Wednesday, November 07, 2007 10:55 AM
Cc: security-basics
Subject: Remote monitoring

On my network of Windows XP platform and I need to arbitrarily monitor
the activities of some of the workstations that are connected to Windows
2003 domain. I have domain admin previleges to the network and am also
aware of the local admin password. I understand that there are hundreds
of spyware softwares assigned for this purpose but I was looking for a
freeware, agentless deployment, monitoring thingy.

Anything of this sort out there?