Can anyone help. My company's system administrator is abusing internet access. I previously copied log files in C:\Program Files\Microsoft ISA Server\ISALogs for evidence but I strongly suspect he has some way of editing these files to remove evidence. His knowledge exceeds mine in this regard. Does anyone know of another way to monitor usage - I would ideally like to monitor without this person's knowledge.
Sounds like you need a good remote pc-monitoring program. spy-partrol.com is, in my opinion, the best commecial software for this. Might be worth checking out. I do know that you don't have to physically install the software on the questionable user's pc and it does run hidden from the user. The only issue would be not personally owning the pc. If you do then Great! If not then you might need to get permission from the actual pc owner or you could find your good intentions along with you being fired or worse sued.
The type of activity your sys admin is engaged in will influence your course of action.
If it is illegal activity like accessing abuse images then your best course is to report him to the law. If its a case of him breaking his terms of contract with your company then bring in some expert help to monitor his activities and with their report you should be in a position to deal with the issue fairly. You must be careful if you snoop on the sys admin he could claim in invasion of privacy and land you right in a mess.
Is internet access only available through your proxy server ?
It would also help to know if this sysadmin is your boss/immediate superior. Here in the States, monitoring of your higher-ups has not been looked upon favorably, even when the upper person is doing something wrong. Hopefully you will have more luck with this, especially if this person is in the wrong.
Agree with the previous post, you have to explain clearly the scenario and your position within the firm.
- Is the Admin your employee?
- You own the network, resources and machines?
- How many terminals he uses? OS used? etc …
what brand of switches do you use? if they are cisco there are a few tricks you can flip depending on current software load on them. also, you could install a sniffer on the network
Can anyone help. My company's system administrator is abusing internet access. I previously copied log files in C\Program Files\Microsoft ISA Server\ISALogs for evidence but I strongly suspect he has some way of editing these files to remove evidence. His knowledge exceeds mine in this regard. Does anyone know of another way to monitor usage - I would ideally like to monitor without this person's knowledge.