• We’re currently investigating an issue related to the forum theme and styling that is impacting page layout and visual formatting. The problem has been identified, and we are actively working on a resolution. There is no impact to user data or functionality, this is strictly a front-end display issue. We’ll post an update once the fix has been deployed. Thanks for your patience while we get this sorted.

How can you tell if someone on the network is snooping around on your computer?

GasX

Lifer
The "victim" is a remote employee and connects to work by

1. logging on to windows
2. log on to the corporate VPN

Connection to the mail server is then possible as well as gaining access to network servers.

Is there a way to see if people are snooping around on the computer?
 
The "victim" in this case is my girlfriend. She wants to know if people have been looking at her files, etc...

I am not trying to find out how to snoop, I am trying to find out how to detect snoops...
 
Assuming this is 2k or XP pro with NTFS for a file system,Go to the run line and enter gpedit.msc (otherwise stop reading now. 98, ME and 95 dont have this capability)

In the window that opens, navigate to Computer Configuration> Windows Settings >Security Settings > Local Policies> Audit Policy.

Once you are there, in the right hand pane, you will see a setting "Audit object access"

Right click this setting, and select which type of access you would like to audit. You can audit success, failure, or both. Generally you would only want to audit failures (which means someone is trying, but fails to access an object), depending on your situation, you may want to audit success too, but bear in mind success audits can stress the system a tiny bit.

Anyhow, once you set they type of auditing you want to do, close that window.

Now, navigate to any file/folder you want to audit, right click it, select properties, and then the security tab, Advanced Button.

You will see an Auditing Tab. Select the user or group you want to watch, then add them in.
You will see a list of different types of actions (read, write, etc, etc). Just click the types you want to audit.

From now on, if anyone tries to do something to that file/folder that you have decided to watch, an entry will appear in the event log under the security setting. You can see who, what time, what file/folder and what action they attempted.

You can do this for as many files/folders as you like.

 
Back
Top