No, you really just need a couple of tools. Why are you making this more complicated than it has to be? Have you implemented this before? Audit Logging settings for the top four events, and GFI EventSentry. What else, specifically, are you saying they need? Please be specific.
-- Durf On Wed, Jan 7, 2009 at 11:32 AM, Devin Meade <[email protected]> wrote: > Watch out setting the server's event log bigger than 300MB. CHeck this > out: > > > http://www.windowsnetworking.com/kbase/WindowsTips/Windows2003/AdminTips/Admin/MaximumsizeforEventlogs.html > > You are gonna have to use something other than windoze file auditing > due to this limit. Something designed for $$ this $$ need $$. Like I > see in other posts, you will need multiple tools. We use MS ISA's > logging for web surfing history - it works well if setup right. > > Something tells me he wants it at no cost. > > hth,Devin > > On Wed, Jan 7, 2009 at 9:31 AM, Michael B. Smith > <[email protected]> wrote: > > Is he a control freak, or what? > > > > > > > > ISA can give you web auditing. For the rest, you'll need a third party > > application. (And you can also go third-party for web auditing – WebSense > is > > probably the most popular.) > > > > > > > > Personally, I'm fond of NetPro's ChangeAuditor (they were recently > acquired > > by Quest). NetWrix also has a suite of tools for this that is installed > at > > one of my clients. > > > > > > > > To audit EVERYTHING, you may find it necessary to add a server that does > > nothing but process audit records. The volume is quite large, even in a > > small network. > > > > > > > > Regards, > > > > > > > > Michael B. Smith, MCITP:SA,EMA/MCSE/Exchange MVP > > > > My blog: http://TheEssentialExchange.com/blogs/michael > > > > I'll be at TEC'2009! http://www.tec2009.com/vegas/index.php > > > > > > > > From: Alex Carroll [mailto:[email protected]] > > Sent: Wednesday, January 07, 2009 10:25 AM > > To: NT System Admin Issues > > Subject: Auditing Everything > > > > > > > > I have a request from my CEO to audit everything that happens on our > > network. When users open files, when they change files, delete files, > use > > any programs, go to any websites (we use ie7, firefox), etc etc etc. Do > any > > of you have a good solution you can recommend for that? I can google all > I > > want, but I won't know the real world experience by doing that. We are a > > smaller company – 16 users. Right now we have 3 servers (1 SBS 03, 2 > that > > are 2003) in production. We use XP and Vista. > > > > > > > > Thanks in advance! > > > > > > > > Alex Carroll > > > > Software Support > > > > Crabtree Companies, Inc. > > > > 651-688-2727 > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > Devin > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > -- -------------- Give a man a fish, and he'll eat for a day. Give a fish a man, and he'll eat for weeks! ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
