Monitoring tool

[knadan]

Hello is there any monitoring software that allows to track uptime of a windows server, track who logged in & modified configs etc....

[Steven Clementi]

I know the event logs all store that information. And knowing how people like to make shareware and freeware.... there must be something that parses the event logs for that information in order to display it in a useful view.

Unfortunately, I can't think of anything off hand for you to look at.

Steven

[Rune J. Winje]

Hi,
I think you will find a wealth of logs (including uptime) collected by this tool:
http://www.microsoft.com/downloads/details.aspx?familyid=00AD0EAC-720F-4441-9EF6-EA9F657B5C2F&displaylang=en

However once you begin to think about an untrusted admin or user performing actions and potentially knowing what they do and how to cover their tracks, the we are into a much more difficult subject.

First you would need to enable security logging (auditing) to log both successful and failing use of user rights and object access etc... But you are then faced with a lot of logs to read through, so most probably then need to use 3.rd party tools that claim to discover specific patterns of use/misuse that indicate hacking or similar.



Cheers,
Rune