passive monitoring

i am in a situation where i have been asked to passively monitor (i can't
tell them i am doing it) the activities on a win 2k server and what
programs get installed on it.

i have to give them full admin accounts and full reign over the machine,
but i have to find a way to inventory the programs installed and track what
they install. the machine in phisically at another location. i am able to
connect to it and manipulate it remotely using MS builtin services.

i was thinking of running baleric on the machine and then running it
periodically every month or so and compare the results. but wondering if
you guys have used a better and simpler product. i also don't have much of
a budget for this. a stealth feature would be handy.

--
Secure Lockdown

Secure Lockdown

Secure Lockdown wrote:
> i am in a situation where i have been asked to passively monitor (i can't
> tell them i am doing it) the activities on a win 2k server and what
> programs get installed on it.
>
> i have to give them full admin accounts and full reign over the machine,
> but i have to find a way to inventory the programs installed and track what
> they install. the machine in phisically at another location. i am able to
> connect to it and manipulate it remotely using MS builtin services.
>
> i was thinking of running baleric on the machine and then running it
> periodically every month or so and compare the results. but wondering if
> you guys have used a better and simpler product. i also don't have much of
> a budget for this. a stealth feature would be handy.
>

How much software installation and typing can there be on that server? A
keystroke logger? That can be set to show activity at various levels and
e-mail you the results.

Belarc does a pretty good job of inventoring the software.

g-w

zz

"Secure Lockdown" <> wrote in message
news:Xns94F4F295028A4securelockdown2123@66.185.95. 104...
> i am in a situation where i have been asked to passively monitor (i can't
> tell them i am doing it) the activities on a win 2k server and what
> programs get installed on it.
>
> i have to give them full admin accounts and full reign over the machine,
> but i have to find a way to inventory the programs installed and track
what
> they install. the machine in phisically at another location. i am able to
> connect to it and manipulate it remotely using MS builtin services.
>
> i was thinking of running baleric on the machine and then running it
> periodically every month or so and compare the results. but wondering if
> you guys have used a better and simpler product. i also don't have much of
> a budget for this. a stealth feature would be handy.

have you thought about Aida32? Aida shut down, but it looks like similar
software is available from http://www.lavalys.com
>
> --
> Secure Lockdown
>

Martin

> a budget for this. a stealth feature would be handy.

Gee you freaking Commissar! Why can't you be
straight up and simply tell them you are monitoring
operations on that machine? First of all, you jerk,
you don't need any extra software to do that, and
second of all ( you immature writer of "i" ), who do
you think you are fooling ! ANY Windows machine
can be monitored from a distant machine, and that
has been built in for years. So, what exactly are you
up to ?

johns

johns

Secure Lockdown said in
news:Xns94F4F295028A4securelockdown2123@66.185.95. 104:
> i am in a situation where i have been asked to passively monitor (i
> can't tell them i am doing it) the activities on a win 2k server and
> what programs get installed on it.
>
> i have to give them full admin accounts and full reign over the
> machine, but i have to find a way to inventory the programs installed
> and track what they install. the machine in phisically at another
> location. i am able to connect to it and manipulate it remotely using
> MS builtin services.
>
> i was thinking of running baleric on the machine and then running it
> periodically every month or so and compare the results. but wondering
> if you guys have used a better and simpler product. i also don't have
> much of a budget for this. a stealth feature would be handy.


Who actually OWNS the machine that you intend to spy on?

*Vanguard*

"johns" <> wrote in news:c92nuk$s0s$1
@kestrel.csrv.uidaho.edu:


<drivvel snipped>

> So, what exactly are you
> up to ?
>
> johns

just need an audit trail of software installed on the server. a before and
an after picture. a key logger is not an option. i do not want to capture
data input.

--
Secure Lockdown
CISSP, MCSE, Security+, Linux+

Secure Lockdown

"*Vanguard*" <no-> wrote in news:Gcdtc.1152
$eY2.226@attbi_s02:

> Who actually OWNS the machine that you intend to spy on?
>

they do but we paid for it. does that make any sense?

as stated in other post. i don't want to use a key logger. the data input
is confidential and i don't want to see it.

i just need a program inventory audit trail on a regular basis. the support
agreement states that they will not install non-approved software otherwise
we will not support it. i don't think i can enforce it anyways, but at
least i will have some sort of proof that they voided the agreement.

baleric is good. but i don't think i can run it remotely via command line,
can i? i tested the free ver. on a test box, it leaves a lot of junk.

--
Secure Lockdown

Secure Lockdown

Secure Lockdown <> wrote in
news:Xns94F6CCE41A2F9securelockdown2123@66.185.95. 104:

> "johns" <> wrote in news:c92nuk$s0s$1
> @kestrel.csrv.uidaho.edu:
>
>
> <drivvel snipped>
>
>> So, what exactly are you
>> up to ?
>>
>> johns
>
> just need an audit trail of software installed on the server. a before
> and an after picture. a key logger is not an option. i do not want to
> capture data input.
>

p.s. johns, you gotta loosen up, dude. you keep that up and you will give
yourself a heart attack at a young age.

--
Secure Lockdown

Secure Lockdown

zz <> wrote in
news:N8%sc.13279$ y.com:

> Secure Lockdown wrote:
>> i am in a situation where i have been asked to passively monitor (i
>> can't tell them i am doing it) the activities on a win 2k server and
>> what programs get installed on it.
>>
>> i have to give them full admin accounts and full reign over the
>> machine, but i have to find a way to inventory the programs installed
>> and track what they install. the machine in phisically at another
>> location. i am able to connect to it and manipulate it remotely using
>> MS builtin services.
>>
>> i was thinking of running baleric on the machine and then running it
>> periodically every month or so and compare the results. but wondering
>> if you guys have used a better and simpler product. i also don't have
>> much of a budget for this. a stealth feature would be handy.
>>
>
> How much software installation and typing can there be on that server?
> A keystroke logger? That can be set to show activity at various levels
> and e-mail you the results.
>
> Belarc does a pretty good job of inventoring the software.
>
> g-w

no keyloggers allowed.

--
Secure Lockdown
CISSP, MCSE, Security+, Linux+

Secure Lockdown

"Martin" <> wrote in news:c92aeb$avq$1
@hercules.btinternet.com:

> have you thought about Aida32? Aida shut down, but it looks like similar
> software is available from http://www.lavalys.com

thaks, i will look into it.

--
Secure Lockdown

Secure Lockdown