Re: Monitoring of Admin logins

[Tremaine Lea <security-basics () ddiction com>]

A common practice currently is to create what are referred to as '99'  
accounts.  Change the administrator password to something obscenely  
secure, and create username99 accounts that have the required  
administrative privileges.  Easier to keep track of makes for a good  
audit trail.

It should also encourage users to only login with their 99 account  
when they need administrative privileges.

Cheers,


---

Tremaine Lea
Network Security Consultant

Be in pursuit of equality, but not at the expense of excellence.


On 10-Apr-07, at 10:25 AM, Sohail Sarwar wrote:

> Hi there,
>
>         I am assuming this have been done, but how ?  I would like to
> get notified when a user logs in to my domain as an admin
> (Administrator)  I have several people who are using the admin  
> account,
> and I would like to setup something so that it notifies me via and  
> email
> that a specific person has logged in to the domain controller or  
> windows
> 2003 servers as the administrator.
>
>         I guess something like who the user is and from where..  Is
> there such a thing ?
>
> Thanks,
> Sohail