Windows

I don't know what kind of "sabotage" you are referring to but if it is changing the registry or different settings, if you are using NT or 98 I would use Policy Editor.This will resrict all registry editing tools and deny access to the control panel, etc.To actually catch them,there is a lot of software out there to do this. You can go to www.snapshotspy.com for one. I haven't tried this personnaly but it can email the logs to you at certain intervals. I think about $50
Another is at spectorsoft.com (about $70)
Good luck!

I just recently found a freebie on Winmag.com's website that might do what you need.

Go to http://www.winmag.com/columns/powertools/pwsnoop.htm

There you'll find a description of what it does as well as a screen shot.

Essentially, it creates a log file that logs activities that occur on the pc.

I've put it in my startup folder just to evaluate it, but I understand that probably wouldn't fit your situation. I would think that you could place it in the run line of the WIN.INI or the run line in the Windows registry. If not, you could just be sneaky and put it in the startup folder and rename it to something that is usually in the startup folder, like FINDFAST, and change the icon to match.

The only thing I can see so farthat I don't like about this program is the fact that if you do a CTRL ALT DEL, you can see SNOOP in the Close Program list. If they select it and End Task, it turns the activity tracker off.

I hope that helps.

In addition to my previous suggestion, I concur with the other tech that suggested using policy editor.

Microsoft has another tool that is used in restricting user's damaging access to the system. It's called Tweakui. You can find it at the link below:

http://www.microsoft.com/ntworkstation/downloads/PowerToys/Networking/NTTweakU

This version of Tweakui is made for Windows 9.x, NT, ME, and 2000.

If I were you, I would 'ghost' the hard drives of these workstations for quicker, easier recovery in case of any data loss, 'natural' and 'assisted'.

The item in my first answer is freeware; Tweakui is as well.

I agree with the answers above concerning policy settings that will lock the machine down. There are also 3rd party products that revert a machine back to a preset point without reimaging. I don't know of the names.
For tracking user activity try Stealth Keyboard Interceptor at the following link: http://www.zdnet.co.uk/software/internet/security/sw6.html There is a description of the software at the sight. It basically captures keystrokes and system start and close info.
Good Luck

This question was closed by the author