anonpostguy

Forum Replies Created

Viewing 9 posts - 1 through 9 (of 9 total)
  • Author
    Posts
  • Avatar
    anonpostguy
    Member
    in reply to: Tracking user CD/DVD disc burning activity #315598

    Re: Tracking user CD/DVD disc burning activity

    gforceindustries;134230 wrote:
    I’d suggest disabling USB through Device Manager rather than in the BIOS. That requires administrative privileges to undo, rather than entering the BIOS, or clearing the CMOS. You can also prevent USB storage devices from functioning (as well as CD drives, floppies etc) without affecting other USB devices by reading one of Daniel’s articles.

    Thanks for the tip, however, disabling USB in BIOS vs Device Manager is a decision that’s out of my hands.

    Are there any third-party CD/DVD burning software packages that will log the files and folders burned to disc? I’ve checked Nero’s logs and they don’t show any detail regarding the files burned. I’m looking for anything with a significant level of granularity.

    Avatar
    anonpostguy
    Member
    in reply to: Tracking user CD/DVD disc burning activity #315597

    Re: Tracking user CD/DVD disc burning activity

    gforceindustries;134217 wrote:
    I would recommend that you remove the optical drives from computers, and setup a machine with a burner in a secure area that people are required to authenticate to get into. Swipecard, fingerprint, etc.

    Edit: FYI, you can edit your existing posts if you want to add to them, rather than posting twice in a row.

    We are doing exactly that. We are removing all optical drives and disabling usb on the bios for all the users that handle the sensitive data. And, we are setting up one system in a room that requires an ID swipe. However, we need to track what happens on that one computer in the lockup room, as far as burning goes.

    Avatar
    anonpostguy
    Member
    in reply to: Tracking user CD/DVD disc burning activity #315596

    Re: Tracking user CD/DVD disc burning activity

    Wired;134107 wrote:
    Remove the burner, or at least the data cable. No more burning :)

    We still have to burn CD/DVD’s but the activity must be tracked.

    Avatar
    anonpostguy
    Member
    in reply to: Tracking user CD/DVD disc burning activity #315595

    Re: Tracking user CD/DVD disc burning activity

    gforceindustries;134087 wrote:
    What software do you use? The event logs will show when the associated services start and stop if you use the builtin CD burning facility, but I don’t believe it includes username.

    Presumably all you want to log is username?

    As far as I know there’s no way to audit this. Certainly not natively in Windows, and definately not if you’re using third party software to burn disks.

    Out of interest, why do you want to see who’s burnt discs?

    Some of our clients are financial institutions. Due to the personal information that we are dealing with, we are required to show the movement of this information through our system. Sometimes we are required to burn information to disc and must capture who did the burning, what files were burned, and the date and time.

    If it is not possible within Windows itself, can anyone suggest a third party auditing tool to accomplish this?

    Thanks,
    Anonpostguy

    Avatar
    anonpostguy
    Member
    in reply to: Security permissions for Domain admins group #315594

    Re: Security permissions for Domain admins group

    I have a similar issue. My question is, how do I add a user to the domain admin group? I have two users that I need to be in this group. Everytime I add them, eventually their membership in the group disappears. What do I need to do to keep them in the group? Any help greatly appreciated.

    Thanks,
    Anonpostguy

    Avatar
    anonpostguy
    Member
    in reply to: AdminSDHolder Object Help #315593

    Re: AdminSDHolder Object Help

    themanwhowouldbeking;95161 wrote:
    Do you have a restricted groups policy configured for the security group object ‘Domain Admins’?

    Computer Configuration>Windows Settings>Security Settings>Restricted Groups

    I just checked and there were no policies set in Restricted Groups. Is there anywhere else I should look?

    Thanks,
    Anonpostguy

    Avatar
    anonpostguy
    Member
    in reply to: Moving First Storage Group w/ Public folders question #315592

    Re: Moving First Storage Group w/ Public folders question

    I have successfully moved the databases to new drives. I have a new issue now. When I try to delete the old database files on the old drive they just reappear again after deleting. Any ideas on how I can finally delete these? Any help greatly appreciated.

    Thanks,
    Anonpostguy

    Avatar
    anonpostguy
    Member
    in reply to: Moving First Storage Group w/ Public folders question #315591

    Re: Moving First Storage Group w/ Public folders question

    Hi, Simon. Thanks for the info. Is there any way to move the .ifs files. I have a corrupt drive that I have to replace. Any help greatly appreciated.

    Thanks in advance,
    Anonpostguy

    Avatar
    anonpostguy
    Member
    in reply to: Moving First Storage Group w/ Public folders question #315590

    Re: Moving First Storage Group w/ Public folders question

    I’ve got my finger on the button and I’m just ready to start moving the public folder database. Once that’s done, I’m going to be moving the first mailstore database. A couple of quick questions before I pull the trigger: Is there anything else I should be aware of before moving the Public Mail Folder databases? Because I’m out of space on the drive it won’t let me back up properly so I’m working on a wing and a prayer here. The First Mailstore Database has only a few accounts left on it. However, it houses the mailbox for the administrator account I am logged onto the server with. Can this present any problems or issues? Also, once these databases are moved there are a couple of .ifs files in the mdbdata folder. Can these be moved? Also, are there any other suggestions for backing up the databases when I have no room on the drive (i.e., unmount and many copy the files)? Any suggestions greatly appreciated.

    Thanks in advance,
    Anonpostguy

Viewing 9 posts - 1 through 9 (of 9 total)