SERVER USER ACTIVITY AUDIT WINDOWS

One of the important task that most of the administrators are dealing these days is to find out where a user has logged on. Both are open source applications for monitoring users’ activities in the system. As you know, the concept of auditing in an Active Directory environment, is a key fact of security and it is always wanted to find out what a user has done and where he did it.

SERVER USER ACTIVITY AUDIT WINDOWS

Triggers are not allowed in our production environment so I created a SQL Job that is scheduled to run every five minutes. During the audit, the auditor should check that audited systems are configured with psacct or acct. Local User Logon / Logoff Windows Member Server Auditing All audit reports. Select the Security tab, and then select Advanced. Right-click the Active Directory object that you want to audit, and then select Properties. Make sure that you select Advanced Features on the View menu.

I notice some unwanted activity after staring a new job and decided to create a script that notifies me via email when this occurs. Select Start > Programs > Administrative Tools, and then select Active Directory Users and Computers.

Security is probably one of a production DBA's most important tasks and if developers use application or service accounts to run queries in your production environment you need to identify then and prohibit it.

Server user activity audit