OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Brad (gryphonnaustarnet.com.au)
Date: Thu Nov 15 2001 - 09:34:49 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    On 15 Nov 2001 at 9:48, Michael Fanara wrote:

    From: "Michael Fanara" <michael.fanarayale.edu>
    To: "Focus on Microsoft Mailing List" <FOCUS-MSsecurityfocus.com>
    Subject: auditing PCs
    Date sent: Thu, 15 Nov 2001 09:48:59 -0500

    > The list,
    >
    > Are there any 3rd party utilities out there that would allow me to track
    > logins - who, when, how many times since x days ago, etc.? I know I could
    > turn on auditing and read the security logs, but I need to do this for about
    > 250 NT4.0 machines, spread out, in an NT4.0 domain. Is there an enterprise
    > solution? Is there anyone else out there doing the same thing?
    >
    > Thnx for your time.
    >
    > Mike Fanara
    > Network Administrator
    > Office of Facilities
    > Yale University
    > michael.fanarayale.edu
    > 203-432-4719 w
    > 203-432-8881 f
    > 203-627-1773 c
    >

    We've been using kix scripts of late to monitor logins to systems and gather auditing info.
    I don't know if it's the solution you're looking for, but you can draw a heap of information from the systems at login time and have it output to a spreadsheet on a server for
    review. Some of the information we're gathering is:
    system's network name
    IP address
    configuration
    username
    time
    installed software (for audit purposes) from specific registry keys only

    Because the script runs automatically at each login, we get a good overview of how often and when the systems are accessed. No doubt there is a lot more information you
    could gather using kix scripts, and the price is agreeable. :o)

    http://www.kixtart.org/

    >

    --
    Brad Griffin
    Gryphonn Design
    Computer Security Solutions
    Custom designed systems
    Upgrades, components
    Ph: 0409057865
    195 George Street
    Rockhampton QLD 4700
    ABN: 12 095 821 961
    ***************************