Users Internet History

[Blues]

I am looking for a good tool that can be run to gather what websites have been visited and by what user. We have a tool that works well for most the PCs but the problem we are running into with with doing this for users who are on the terminal server. I have a user who I know is looking up porn from the computer. Management doesn't seem interested in fixing the problem with the user so I need to find what sites explicitly he is visiting to add them to our content filter. I would like a solution that can be run from the network for all the PCs we have but at the very least I would like something I can run on the terminal servers to find out whats happening on those.

Note: If this should belong somewhere else feel free to move it to the proper location.

[rurbaniak]

You can use this tool on the terminal server and it will show the IE history of whatever user you select: http://www.nirsoft.net/utils/iehv.html

Very Handy!

If that is not enough, and you need more, I'd suggest setting up a PROXY server that everyone goes through so you can log it.

A quick easy way to do that is with Endian Firewall and VmWare.

[Blues]

I found that tool as well and it should work given I generally know who I am looking at. We have a program that audit's PCs and helps us but the problem is with the Terminal Servers with so many users we can't get who is doing what. We have a Sonicwall Firewall/VPN at each major location that does our content filter but I don't know that they do any logging as far as who it is I believe it just tells me the machine.

[rurbaniak]

I found that tool as well and it should work given I generally know who I am looking at. We have a program that audit's PCs and helps us but the problem is with the Terminal Servers with so many users we can't get who is doing what. We have a Sonicwall Firewall/VPN at each major location that does our content filter but I don't know that they do any logging as far as who it is I believe it just tells me the machine.

I haven't used the Content Filter in Sonic Wall, so I don't know. It's possible that all of the logging isn't enabled. I'd look to see if theres more to turn on.

[Mac]

Keylogger....

Find out everything he is up to ;)