Main Restorations Software Audio/Jukebox/MP3 Everything Else Buy/Sell/Trade
Project Announcements Monitor/Video GroovyMAME Merit/JVL Touchscreen Meet Up Retail Vendors
Driving & Racing Woodworking Software Support Forums Consoles Project Arcade Reviews
Automated Projects Artwork Frontend Support Forums Pinball Forum Discussion Old Boards
Raspberry Pi & Dev Board controls.dat Linux Miscellaneous Arcade Wiki Discussion Old Archives
Lightguns Arcade1Up Try the site in https mode Site News

Unread posts | New Replies | Recent posts | Rules | Chatroom | Wiki | File Repository | RSS | Submit news

  

Author Topic: security problems...how can i track login attempts?  (Read 3211 times)

0 Members and 1 Guest are viewing this topic.

hulkster

  • Trade Count: (0)
  • Full Member
  • ***
  • Offline Offline
  • Posts: 2382
  • Last login:September 05, 2021, 04:27:59 pm
  • HulkaMAMEia is runnin' wild!
security problems...how can i track login attempts?
« on: April 11, 2005, 01:20:39 pm »
for those of you who are in the know about networks (in this case Windows 2000 server environment)....here at work an employee guessed someone's password and logged in as them and possibly looked at files they werent supposed to.  of course i need to find out if she did indeed login to this particular pc. 

i looked at the event viewer at the Security Log, but it only shows the server name under the "Computer" column.  i want to know what computer she logged into, on a certain day.  is there a way to tell this from the server?

GGKoul

  • Cheesecake Apprentice
  • Trade Count: (0)
  • Full Member
  • ***
  • Offline Offline
  • Posts: 4707
  • Last login:May 26, 2024, 02:06:23 am
  • I was once a big man!! -4700 posts later...
Re: security problems...how can i track login attempts?
« Reply #1 on: April 11, 2005, 01:24:28 pm »
If someone logged in as that person, then everything will look like that person logged in.
« Last Edit: April 11, 2005, 01:27:08 pm by GGKoul »

hulkster

  • Trade Count: (0)
  • Full Member
  • ***
  • Offline Offline
  • Posts: 2382
  • Last login:September 05, 2021, 04:27:59 pm
  • HulkaMAMEia is runnin' wild!
Re: security problems...how can i track login attempts?
« Reply #2 on: April 11, 2005, 01:42:38 pm »
well apparently someone guessed the employee's password and logged into the employee's PC and sent some emails and accessed the internet.  this pc is another city but it is on our network.  we dont have any tracking software or logging software, so how would i find out when it was accessed? 

GGKoul

  • Cheesecake Apprentice
  • Trade Count: (0)
  • Full Member
  • ***
  • Offline Offline
  • Posts: 4707
  • Last login:May 26, 2024, 02:06:23 am
  • I was once a big man!! -4700 posts later...
Re: security problems...how can i track login attempts?
« Reply #3 on: April 11, 2005, 01:47:35 pm »
If you have an Exchange box, you may be able to see when they last logged in.

As for surfing, you can view the Internet History to see what sites then visited.


Thenasty

  • Trade Count: (+17)
  • Full Member
  • ***
  • Offline Offline
  • Posts: 4419
  • Last login:Yesterday at 09:18:23 pm
    • Thenasty's Arcademania Horizontal/Vertical monitor setup.
Re: security problems...how can i track login attempts?
« Reply #4 on: April 11, 2005, 02:16:28 pm »
time to change password and it seems like it was an easy password to guess. You need to combine some numbers with alphas and tell that user not to use the obvious that someone can guess. Set server login attempts to lockout after 3 tries.
Thenasty's Arcademania Horizontal/Vertical setup.
http://forum.arcadecontrols.com/index.php?topic=26696.0

Free VGA Breakout Cable
http://forum.arcadecontrols.com/index.php?topic=38228.0

Ultimate All in One Coin Mech write up (Make your own)
http://forum.arcadecontrols.com/index.php?topic=19200.0

hulkster

  • Trade Count: (0)
  • Full Member
  • ***
  • Offline Offline
  • Posts: 2382
  • Last login:September 05, 2021, 04:27:59 pm
  • HulkaMAMEia is runnin' wild!
Re: security problems...how can i track login attempts?
« Reply #5 on: April 11, 2005, 03:33:03 pm »
i have all those security features, but i think this password was written down and somebody went snooping.  its being handled though.

DemonBrew

  • Trade Count: (+4)
  • Full Member
  • ***
  • Offline Offline
  • Posts: 51
  • Last login:December 10, 2014, 06:05:50 am
Re: security problems...how can i track login attempts?
« Reply #6 on: April 11, 2005, 04:03:15 pm »
What "server" are you looking at? Is it a Domain Controller? In any event, the feature you are looking for is called "security auditing" in Event Viewer and is not turned by default (thanks MicroSoft!). Here's how to turn on security auditing on Windows XP Pro.

http://netsecurity.about.com/cs/tutorials/ht/ht040503.htm

If you have security auditing turned on and Successful Logins enabled, then it should be in the Security log of Event Viewer.
this space intentionally left blank

DemonBrew

  • Trade Count: (+4)
  • Full Member
  • ***
  • Offline Offline
  • Posts: 51
  • Last login:December 10, 2014, 06:05:50 am
this space intentionally left blank