Networks

Ask something
Discussion Locked

Monitor/log (Terminal Serv session)

0 helpful
8 replies

by kymmie

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I would like to know if there was a way to see what a Terminal Server user has done in his/her session. This particular user has Administrator rights but has been told that he is not allowed to change anything. Thanks.

8 replies

by kymmie

Where is this done? Do you have a quick technote or a walkthrough? I am new at this. Thanks.

by ross.bale

Assuming that you are running Windows 2000 Active Directory and the User's Account has Domain Administration privs, switch on Auditing as a Domain Group Policy and specifically audit for Object Privilege Usage - this will then show when the privs were used. Do not put this on for a long period of time as it will fill up your Event Logs.

by kymmie

I would like to make is so that the user can view but not change. How is that done? Thanks.

by amanabala

I was wondering why you would need an user with admin rights not to be able to change. You might as well create a new user with limited privileges and have him(or her) use that id instead?
-Ravi

This discussion is closed to new replies.