"Mehbs" <msamani[ at ]comcast.net> wrote in message
news:OFKb$3HrHHA.500[ at ]TK2MSFTNGP02.phx.gbl...
[Quoted Text] >
> I want to keep track of login information. I want to know who logged in
> at what time and if possible, need to know the activities .
To log domain Logons by users you can just enable "Account Logon Auditing"
on the DCs, i.e., in a GPO.
> Is there any software that I can install to watch my network activities
> etc?
You can watch network activity itself with a sniffer or Network Monitor --
Microsoft provides NetMon free with each Server but there is a better
version (3.0) also free on their website.
WireShark (formerly known as EtheReal) is a popular open source
network capture and analysis tool and you can find others through this
site: Insecure.org on their favorite network tools link list page
For MONITORING a network over long periods to watch for illegal
or undesired behavior and problems you might prefer an IDS (Intrusion
Dectection System) -- there are quite a few similarities between a
network monitor/packet capture and an IDS but they are tuned and each
is designed to optomize the particular role.
WinSnort (a play on Snort == big Sniff) is popular as is it's ordindary
Snort (linux etc) cousin.
--
Herb Martin, MCSE, MVP
http://www.LearnQuick.Com
(phone on web site)
|