Tracing a remote user activity

20 pts.
Tags:
Remote users
Security
Can the user activity for a file access on a remote machine be traceable? Example, If a user access files/folders on my machine through network (\machine namec$folderfiles), then can I trace the user activity on my machine?
1

Answer Wiki

Thanks. We'll let you know when a new response is added.

You can view the events of a remote login in Windows using the ‘Event Viewer’ which would let you configure logging for a multitude of events of your system. Checking the logs would let you see details of when an activity was performed, the scope of the activity and who performed it.

Note that if you’re talking about a corporate system the organisation’s policies may require that regular users have limited privileges on their systems, which means you may not be able to access the Event Viewer with your account, so that might be a luxury you could enjoy only on your own personal system.
Note that a corporate system administrator should not be doing anything that goes against company policies either, so there’s no need to monitor anything. Also, a company policy might allow them ownership of any data on their own systems or network — including your personal data. They are also allowed to monitor all activity on their own systems / network, so keep that in mind when you work on them.

Discuss This Question: 5  Replies

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.
  • Subhendu Sen
    Yes, if s/he uses a legal tool/way, then a notification must send to your PC/laptop. But why did you ask this query, is this happened with you, if yes, what symptoms are there/how did you know that. Please come back with more details.
    140,150 pointsBadges:
    report
  • Santhoshk
    Normally an IT Admin would have admin access and when troubleshooting they sometimes connect to files and folders to check some logs remotely without user consent. So there might be a chance that they would look at personal data stored on the machine. So wanted to know if there is a way to trace the remote user activity to know who and what they accessed on the machine.
    20 pointsBadges:
    report
  • Subhendu Sen
    As you did not mention the OS, one more thing that, you can disable remote access on your PC/laptop. But if it is under an office environment, and your admin did the same, then you can ask him/her.
    140,150 pointsBadges:
    report
  • ToddN2000
    Yes. Is there something that happened to raise a concern on the matter? Usually you can start with the network admin to trace the issue.
    133,625 pointsBadges:
    report
  • Jaideep Khanduja
    His local machine windows logs can find the actions being taken by him.
    19,345 pointsBadges:
    report

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

Thanks! We'll email you when relevant content is added and updated.

Following

Share this item with your network: