Announcement

Collapse
No announcement yet.

Tracking where admin account is being used.

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Tracking where admin account is being used.

    Good day all,

    Does anyone knows about product or a script that will enable me to track where my admin account is being used over multiple servers and multiple application. I am currently doing a cleanup, but don't know how to track the usage of the admin account.

    I know a quick way will be just to change the password, but the risk is to big for me

  • #2
    Re: Tracking where admin account is being used.

    start by enabling logon event auditing on a domain controller. this will keep track of logon/logoff events across the domain. then you can create a scheduled event triggered by 4672 and 4624 (logon/logoff) success events

    you have plenty of options for scripts. have you tried google?

    Track login and logout

    How to track users logon/logoff

    hope that helps!
    its easier to beg forgiveness than ask permission.
    Give karma where karma is due...

    Comment

    Working...
    X