Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

My manager was wondering if I could monitor employees activity such as Internet history, email messages (email hosted externally) and other applications like LimeWire and Solitaire.

I am managing Windows Domain (2k8). I prefer a freeware monitor if possible.


locked by HopelessN00b Dec 5 '14 at 11:36

This question exists because it has historical significance, but it is not considered a good, on-topic question for this site, so please do not use it as evidence that you can ask similar questions here. This question and its answers are frozen and cannot be changed. More info: help center.

You should apply for a job in the chinese governement... – bortzmeyer May 27 '09 at 8:20
Our company just recently started filtering content using SmartFilter. I found it quite ironic that it is apparently the same technology used by Iran and Saudi Arabia! – Benjol Jun 5 '09 at 6:28
I think the hope for anything within the realm 'freeware' will be nothing more than a pipe dream as this is not the type of software open-source developers are going to want to spend time developing more than likely. – Jeremy Bouse Jul 16 '09 at 17:34
Find a better way to measure productivity and efficiency than "time spent on recreation"... – Oskar Duveborn Sep 19 '10 at 12:25

12 Answers 12

up vote 21 down vote accepted

You should also ask the question "Why?"

If you want to block inappropriate sites in the workplace = a web filter.

If you want to prioritise bandwidth for commercial purposes = traffic shaping.

If you want to monitor employee use of work resources = internet monitoring.

Enterprise applications certainly exist which can do all the above (WebSense springs to mind, although that is not 'freeware') but be aware that your manager may need to have an Internet Usage Policy in place, perhaps as part of a wider Employee Handbook distributed to all staff, which sets out which of the above are in use and what the penalties are for inappropriate online behaviour.

In the event of using such activity in a warning or dismissal, the employee would have to have been aware that what they were doing was a violation of clearly defined rules to which they had previously agreed (I can only speak from a UK perspective but I imagine EU law would be similar).

I am aware that the above is deviating slightly from a 'sysadmin answer' but it should certainly be considered when installing any new network monitoring.


If you are in the UK, before you implement any form of monitoring, have a read of The laws relating to monitoring your employees - published by, a UK law firm. More info about employment law (written in easy-to-follow, digestible chunks) is here:

Employees have a lot of rights!


If your employer feels that employees running a short-lived stress-reducing game such as Solitaire is a problem, seek new employment.

People are more efficient if they are allowed to relax for a short time with a simple game such as this. People are vastly less efficient if they are treated like slaves or machines. Employers that fail to realize this will be problematic to work for in many ways.

You should also consider how being involved in an unethical situation such as this will impact you personally. Either you will experience feelings of guilt, or you will start to feel it is OK to monitor your family in this way.

If you think it is OK to monitor employees' personal email usage from work, ask whether it is OK to ask them to do work while at home.


If freeware: Some editions of Vista/Win7 include a built-in monitor, that works ok.

But if you ask me: Do not monitor, I would rather block.


Several schools in Norway are using 3ami to do this. From the 3ami site:

3ami MAS is a complete computer activity monitoring package. Once installed across a corporate network, MAS will track changes to hardware and software throughout your organisation. MAS captures and securely stores records of all user activity – not just on the internet but in every application including email, word processing, spreadsheet applications, instant messaging and online.

This suite is not freeware, but I have heard several people being very satisfied with it.

Make sure the laws in your country allow you to monitor the employees this way though.

Make sure the laws in your country allow you to monitor the employees this way though. - His profile claims he is from Italy. While I don't know Italian law I suspect that this wouldn't be allowed because it's more or less a democratic European country. And I personally can't fit "spying on my colleges" in my conscience. I would file this request under "managers wet dream" a tell them "well, it's possible but we need X$ for this", where X is sufficiently large so that they are scared of ;) – Martin May 27 '09 at 7:03
In many jurisdictions in Canada at least, employees would need to be notified in advance of any monitoring taking place. In our case the monitoring is allowed as long as people know that they'll be monitored. – kdmurray May 27 '09 at 7:06

Start firing the non-productive employees?

EDIT: Settle down guys. I didn't mean this in a "vindictive pointy-haired manager" way. More of a "drop the dead-wood" way. By non-productive I meant those who come to work and browse serverfault ALL DAY.

or at least issue a warning letter. back to topic please – SZayat May 27 '09 at 7:33
It is perfectly on topic. This is not a purely technical issue and the possible abuse of such techniques are so important that you cannot ignore them. "With great power comes great responsabilities". – bortzmeyer May 27 '09 at 8:19
So every time I decide to take a 10 minute break from my 10 hour workday to read serverfault, technically I'm being unproductive, so I deserve to be fired? – Mark Henderson Jul 16 '09 at 21:34
If an employee spends all day browsing serverfault but still delivers is that non-productive? I fail to see the relation between browsing sites all day and being non-productive. For all I know he or she might do 2x the expected work but at shabby cafés during the weekends ^^ – Oskar Duveborn Sep 19 '10 at 12:22

I believe you shouldn't monitor your employees activity. Not doing so, manages to keep a healthy work-place environment, and happier employees.

If you suspect that some of your employees are not being productive due to time waste in sites like youtube, or whatnot, you should just make surprise visits at their desk to check out what they're doing.


You can track employee computer usage with service. It is not free, though, and does not allow you to monitor email messages.

You can use the personal version for free. I have used it for over a year and it has never caused any trouble.


I agree with Roger, monitoring only introduces problems to the business environment, best thing to do is remove distractions and issues. For the likes of Limewire and P2P a decent Layer2 firewall can block all that traffic, and for Solitaire just remove it from their systems. If they think of a new way of procrastinating, then find a way to block it.


I'm with fourstar... I've tried to police users in the past, but it's really a full time job. You're much better off establishing an Acceptable Use Policy/Internet Usage Policy and having all the employees signing acknowledging they know what it is. Block P2P apps, inappropriate sites, and the like. If you're using active directory, block solitaire via a Software Restriction Group Policy.

You'll save you and your boss so much headache this way.


I believe monitoring is necessary and there's a myriad of apps to do this.

I'm more concerned about users installing (and utilizing) illegal applications. I know this isn't an issue in most workplaces but at a software development company (where I'm at now), it can cause chaos not providing local admin rights to programmers!

I don't think there's a problem with monitoring software installation or hardware changes? Surely that's not breaking any laws simply monitoring installations and changes to hardware only?


what i think you are looking for is a desktop management software, to monitor what files your user download, open, edit, copy and so forth. There are quite a number of desktop management software out there in the market, some free some payware - I would recommend Spiceworks (too lazy to google it...) and another payware type is LANDESK.

Both the above software does more then what you requested from Asset Management, patches push out into the LAN, Remote control, application monitoring and so forth. Good luck


protected by sysadmin1138 Dec 12 '12 at 22:57

Thank you for your interest in this question. Because it has attracted low-quality or spam answers that had to be removed, posting an answer now requires 10 reputation on this site (the association bonus does not count).

Would you like to answer one of these unanswered questions instead?

Not the answer you're looking for? Browse other questions tagged or ask your own question.