General discussion

Locked

Remote Assistance / Control / Shadowing

By nschloss ·
We have various remote sites. To support these users it is beneficial/necessary to be able to remotely access and shadow or control their desktops. Using Dameware MRC / Citrix / Windows Remote Assistance are deemed unacceptable by SOX / audit standards as they do not prevent unauthorized file access once the support person is connected. Does anyone know of any tool that would allow remote access/control with audit logging and selective file access security?

This conversation is currently closed to new comments.

1 total post (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

by BFilmFan In reply to Remote Assistance / Contr ...

This is built-into Windows and you will have to audit for success/failure events on all choices in Audit Policy under the GPO settings.

As the account will have to have local system permissions, user actions will be audited.

Note that this will quickly overflow an event log and Windows event logs are limited to 300 megabytes of maximum size. You will require a solution that will allow you to gather and store event logs from each system being monitored.

There are several software products that will store event logs. Doriansoft is one I have successfully used in the past. http://www.doriansoft.com/

Back to Security Forum
1 total post (Page 1 of 1)  

Related Discussions

Related Forums