On Feb 7, 2008 2:36 PM, Thomas Gonzalez <[EMAIL PROTECTED]> wrote: > I have auditing set on the dc and can see that information. but the > executive admin, wants the receptionist to see when user A logs in, (sort of > spying you know, the backdoor person) then user A logs off at schedule time. > > I'm going to keep searching so when I find something in those lines, I'll > post it back up joe. > > > Thomas
I'll bet that a good syslog server could do this. Install the Snare client (http://www.intersectalliance.com/snare) on your DCs, have them send stuff to a syslog server (http://www.kiwisyslog.com) which will watch for events and can be set up to execute scripts on detection of your set of events. Actually, you might want to put the Snare client on the workstations instead. Kurt ~ Upgrade to Next Generation Antispam/Antivirus with Ninja! ~ ~ <http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm> ~
