-1

Are there any programs that you would recommend that monitor access to your computer from the network? Windows XP Professional My "monitor" I mean log system access from he network. What folders and files are accessed, if any changes are made, etc...

3
  • What operating system? Jul 24, 2009 at 18:09
  • So you mean legitimate system access from the network, or illegitimate access from the network? And I assume you mean the local network rather than the internet, because putting an XP system on the network without a firewall is like putting a big blinking neon sign outside your door that says "please steal everything in my house".
    – Ernie
    Jul 24, 2009 at 18:23
  • 1
    I guess I mean any access. My computer sits on a corporate network, behind their firewall. There are files that are meant to be accessed by some users. There are also users that have no business poking around on my computer. I think I have sharing setup correctly, but I would like to be able to see if there are attempts (successful or not) to gain access.
    – Beaner
    Jul 24, 2009 at 18:40

5 Answers 5

0

PA File Sight can log file and folder access. You'd want to be sure and add your user account and possibly a few system processes to the Ignore list so they don't get logged. Generally it's for server auditing, but it works on XP too.

1

If your problem is really "How do I stop people from accessing my file shares when they have no business doing so", the answer is really "Change the password, then give it only to the people who have any business accessing your shares". Or maybe the problem is that there is no password, in which case you need to set that up.

I also think that you can set up user accounts for file shares. Instead of one password for everyone, it's far more secure to create accounts with different passwords for each user. That way, when someone gives the password to someone they shouldn't, you'll know who it is that's handing out passwords.

This question probably belongs on superuser.com. Also, since this isn't a chatty kind of site, it's better to include as much information as possible when you first ask your question. State the problem in detail, so that people don't need to extract necessary details through lengthy back-and-forth troubleshooting.

2
  • I have sharing setup so that users that are members of select groups or only specific users have access to the folders they should. The issue is I have no control over those users. For instance a user that tells everyone their login password so others can get on their computer. What I want to be able to see is this user accessed this file from this computer at this time. I can then judge if the access was legitimate.
    – Beaner
    Jul 24, 2009 at 19:34
  • What is the nature of the data? Why is it so sensitive that only certain users should have it? Is this a database that people edit, or an Excel spreadsheet that acts as one? It's starting to sound like Windows File sharing isn't the right solution for the job.
    – Ernie
    Jul 24, 2009 at 20:30
0

I like using tail -f |grep ssh myself.

Or the SSH daemon's log.

Define "monitor" and "access to your computer", and "computer" and "operating system" please.

0

IBM ISS (Site protector) - IDS sensor and also Proventia server, both are very good and can not only tell who logged in but also lots of information, like any changes and at the same time it can monitor application and network vulnerabilities and attacks

1
  • if it is Linux you can always run the command "last" that will show all connected users and the last time someone connected Jul 24, 2009 at 18:12
0

Instead of re-inventing the wheel, just go into your Local Security Settings control panel and enable Local Audit Policies.

1
  • 1
    I've tried this before, but it also logs access by myself the system and completely filled the events log in less than a day
    – Beaner
    Jul 24, 2009 at 18:36

Not the answer you're looking for? Browse other questions tagged .