Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I need to logg the activity of a system admin working on a windows 2008 server. We must have a log of all activity, keystrokes and responses. Is there a way to do this - its for regulatory needs in healthcare, and PCI.

share|improve this question
2  
This is actually most likely a PCI violation, as it means you're going to be storing credit card numbers in plaintext with whatever logging app you use. Same with HIPAA. –  devicenull Mar 22 '12 at 22:53
    
well I've never seen this requirement before but who knows maybe its something new, and how its stores the gathered info would be up to the application that is storing it so yes it maybe encrypted just fine. –  tony roth Mar 22 '12 at 23:28

1 Answer 1

Bill, typically these requirements are not to log every keystroke but to log particular actions. In fact, you can usually define in policy what things you need to log. You might search the web for other's policies and implement a sane, reasonable policy. Then FOLLOW it.

Keep in mind, someone must review everything that is logged so keep the policy SANE.

FYI - Logging every keystroke is a security risk because it would expose passwords to those reviewing the logs. It could also cause a denial of service situation due to the need to write so much data to the log.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.