Network Monitoring

[ctagle]

Here is the setup.

1 Windows 2003 server setup with AD and about 20 users and groups.
2. We created about 7 share folders and allowed access to users in the specified groups.
3. Is there a monitoring tool that will notify us who has tried to access a folder, and what folder. Denied or Granted?
4. We are trying to monitor our employees and watch who is trying to access what folders and why?
5. Is there a monitoring tool that will allow us to monitor what websites they are watching during their shift?
6. Is there a tool we can use to monitor the computers on the network and check what exactly they are doing?



Any help is greatly appreciated and thanks in advance.

 

[n0cmonkey]

3. IIRC, the auditting features built into Windows might give you the logs you are looking for (except for the why).
5. Setup a proxy, or run tcpdump on the firewall (not recommended).

 

[jtusa]

Originally posted by: n0cmonkey
3. IIRC, the auditting features built into Windows might give you the logs you are looking for (except for the why).
5. Setup a proxy, or run tcpdump on the firewall (not recommended).

Proxy was what I thought as well, and I'm pretty sure 2K3 server has access logging for AD.

You can monitor every system's network activity via a proxy, packetsniffer, and logs, but if you want to monitor local machine activity you're going to have to install an app on each machine to do so. No particular ones come to mind so you'll just have to google it.