looking for an employee/parental monitoring application

[thecompu-doctor]

I have a client that wants to monitor the couple windows workstations and her employees activities to ensure productivity.

I've used a few misc silent parental monitoring apps in the past, but they have been somewhat challenging to configure. This user is not technically inclined. Do you all have any suggestions?

 

['putertutor]

Are you talking like a keystroke logger or just activity. Refog (KGB) is one I have used in the past. It was a bit ago, but it would log website and computer activity, as well as keystrokes. Single side chat activity only. But if your only looking to log activity (websites, programs) that might fit the bill.

On a separate, and probably unnecessary note, the boss is hopefully planning on telling the employees their activities are being logged, yes?

 

[thecompu-doctor]

Mostly just computer activity. Keystrokes aren't a big deal.

I'm not sure if she is going to disclose her monitoring or not...??? But the computers belong to her/business and she's paying them to work. She has the right to monitor their activity.

 

[Rocco]

I was ready to rebut your comment about being able to monitor it all they want, since it is their equipment. How surprised I am to find out that in almost every state, employers can do just that, in the private sector. Without need for notification.

However, just because you can do something, doesn't mean you should. A simple notification that the employees read once the new policy is in place, just seems like common courtesy, and the ethical thing to do. This stands for ANY policy change, not just changing the monitoring policy. My own opinion of course.

 

[Mick]

Eblaster?

 

[thecompu-doctor]

However, just because you can do something, doesn't mean you should. A simple notification that the employees read once the new policy is in place, just seems like common courtesy, and the ethical thing to do. This stands for ANY policy change, not just changing the monitoring policy. My own opinion of course.

I agree, but at the same time, I don't work for the employees. I've been brought in by the owner and it's her call, its legal and I support her rights. Plus I like getting paid

 

[thecompu-doctor]

Eblaster?

hahaha, on their home page they say...

are your children spending too much time on myspace?​

thanks for the suggestions, i'm looking into them. Unfortunately i think they are still going to be too complex for this client.

 

[Markverhyden]

I agree, but at the same time, I don't work for the employees. I've been brought in by the owner and it's her call, its legal and I support her rights. Plus I like getting paid

True. But that will not protect you or her from getting sued by an employee who found out that they were being monitored without notification. I believe some States actually require notification prior to implementing any monitoring.

If it was me I would not do the work unless the business owner puts out an acceptable use policy document for the employees. Does not need to be anything fancy.

Here is one from SANS that you can use as you see fit.

http://www.sans.org/security-resources/policies/Acceptable_Use_Policy.pdf

 

['putertutor]

Personally, I don't know that I would install such software without something that indicated the employees were given notice about the monitoring. That's mostly a visceral reaction to monitoring as a whole, but there may be some liability on your part as well. Doubtful, but not outside the realm of possibility.

 

[Rocco]

True. But that will not protect you or her from getting sued by an employee who found out that they were being monitored without notification. I believe some States actually require notification prior to implementing any monitoring.

If it was me I would not do the work unless the business owner puts out an acceptable use policy document for the employees. Does not need to be anything fancy.

Here is one from SANS that you can use as you see fit.

http://www.sans.org/security-resources/policies/Acceptable_Use_Policy.pdf

Where he is at is not one of the states that limit what a private company can do, so there is no legal requirement.

Personally, I don't know that I would install such software without something that indicated the employees were given notice about the monitoring. That's mostly a visceral reaction to monitoring as a whole, but there may be some liability on your part as well. Doubtful, but not outside the realm of possibility.

If there is nothing legally wrong with doing it, there is a bigger chance of getting sued for farting in public than being held liable for a company not violating any rights/laws.

Even if the company was breaking the law, are you as the technician required to give LEGAL advise on what is required to be told to their employees? Last time I checked, only lawyers are allowed to give legal advice, so how can you be held liable for not them not following HR laws and regulations as the guy who installed software?

I still think they should be told about it, especially if they can get written up or fired for whatever the boss finds. You can, but should not ever change the rules in your company without notifying your employees about the rule changes. As an employee, I would be ****** in this kind of situation.

But legally, she is good to install whatever she wants. And He is good to help her install whatever she wants him to install.

 

['putertutor]

Where he is at is not one of the states that limit what a private company can do, so there is no legal requirement.



If there is nothing legally wrong with doing it, there is a bigger chance of getting sued for farting in public than being held liable for a company not violating any rights/laws.

Even if the company was breaking the law, are you as the technician required to give LEGAL advise on what is required to be told to their employees? Last time I checked, only lawyers are allowed to give legal advice, so how can you be held liable for not them not following HR laws and regulations as the guy who installed software?

I still think they should be told about it, especially if they can get written up or fired for whatever the boss finds. You can, but should not ever change the rules in your company without notifying your employees about the rule changes. As an employee, I would be ****** in this kind of situation.

But legally, she is good to install whatever she wants. And He is good to help her install whatever she wants him to install.

I agree with you. The chances of legal ramifications for the op are next to zero. I still wouldn't do it myself, though. I missed the post (that I now see) about it being legal in his state. Still wouldn't do it. But, again, that is mostly for personal reasons rather than legal or business ones.

 

[techi]

I personally used Time Doctor to track accurately my time especially at work. It helps me determine how much time I spent on each site and programs I actively use. Good thing about this tool it doesn't invade privacy.

 

[thecompu-doctor]

I sent her the links to time doctor (thanks for that suggestion) and a few others. I also recommended for very limited monitoring, the free windows live parental control software.

thanks everyone

 

[YOCS]

I have used Activtrac http://activtrak.com for one client. The owner was concerned about a few employees abusing the Internet while at work. We came up with an Internet Usage policy and had all employees sign. ActivTrac worked great. Here's an excerpt from their website:

Free: Up to 1GB storage and monitoring of 3 workstations for zero costs.
Invisible: Easy invisible instillation, start gathering data in minutes, uninstall in a snap.
Reports: Data only reports to your account by collecting application titlebars, page titles, URLs, and screenshots.
Action: Can send notifications of user activity, or directly shut down use of applications
Protected: Can be installed remotely or deployed via Active Directory, secured connection and SSL protected.
Cloud: All data stored reliably on Amazon Cloud.

ActivTrak is an easy-to-use, easy-to-install cloud-based monitoring software allowing employers of on-site and remote workers to monitor web and application usage, better improving performance and work-place control.

ActivTrak works when you install an agent onto one or more workstations (either directly, remotely or via Active Directory). The agent is invisible for the user, so no one will know you installed it unless you want them to. Once installed, you can begin seeing usage results within a matter of minutes.

ActivTrak has a very simple, intuitive dashboard allowing you to easily set alarms for user activity notifications and track multiple user sessions in real time from a single screen. The agent quickly collects titlebars, URLs, and screenshots and can easily shutdown applications or notify you of flagged usage.

All data is then stored in a reliable Amazon cloud with a secure SSL protected connection.

You can easily uninstall an Agent or delete an entire account at any time.

 

[cypress]

I have used Activtrac http://activtrak.com for one client. The owner was concerned about a few employees abusing the Internet while at work. We came up with an Internet Usage policy and had all employees sign. ActivTrac worked great. Here's an excerpt from their website:

Free: Up to 1GB storage and monitoring of 3 workstations for zero costs.
Invisible: Easy invisible instillation, start gathering data in minutes, uninstall in a snap.
Reports: Data only reports to your account by collecting application titlebars, page titles, URLs, and screenshots.
Action: Can send notifications of user activity, or directly shut down use of applications
Protected: Can be installed remotely or deployed via Active Directory, secured connection and SSL protected.
Cloud: All data stored reliably on Amazon Cloud.

ActivTrak is an easy-to-use, easy-to-install cloud-based monitoring software allowing employers of on-site and remote workers to monitor web and application usage, better improving performance and work-place control.

ActivTrak works when you install an agent onto one or more workstations (either directly, remotely or via Active Directory). The agent is invisible for the user, so no one will know you installed it unless you want them to. Once installed, you can begin seeing usage results within a matter of minutes.

ActivTrak has a very simple, intuitive dashboard allowing you to easily set alarms for user activity notifications and track multiple user sessions in real time from a single screen. The agent quickly collects titlebars, URLs, and screenshots and can easily shutdown applications or notify you of flagged usage.

All data is then stored in a reliable Amazon cloud with a secure SSL protected connection.

You can easily uninstall an Agent or delete an entire account at any time.

Looks like excellent software. I'll have to give it a try.

 

[thecompu-doctor]

Thank you, this looks great. I'm going to give it a try

 

[Tech in SC]

Deploy an Untangle box on the network and monitor the traffic. You can also do some content filtering as well as some nice reporting. I wouldn't sell the device, I'd lease it out for between $25-$40 monthly (to include the device, monitoring, management and reporting). You will recover your investment within a few months and then its all profit from there on out.

 

[thecompu-doctor]

I actually thought about that, and have deployed a couple in the past. However, that kind of solution will not work with this client.

 

[thecompu-doctor]

Hey David, do you build your own, or resell premium built appliances? If you build them, what kind of specs are you using?

 

[TenYardFight]

True. But that will not protect you or her from getting sued by an employee who found out that they were being monitored without notification. I believe some States actually require notification prior to implementing any monitoring.

If it was me I would not do the work unless the business owner puts out an acceptable use policy document for the employees. Does not need to be anything fancy.

Here is one from SANS that you can use as you see fit.

http://www.sans.org/security-resources/policies/Acceptable_Use_Policy.pdf

If I'm hired to deploy software on a computer my client owns, there are only a few laws (such as HIPAA) that require me to discern whether or not the person hiring me is breaking the law... As a general rule. I do what I am told. I consult when I am asked to consult. In this instance, I tell my client there are laws to consider, I remind them I'm not legal counsel. They should check with theirs. Then, I do what I am told.