Ever have a user that was intent on sabotage?

[quote]Originally posted by firemonkey:
<strong>Heres my delema I have a feeling that someone is doing it, but I have no proof are there any ideas how I can track this person</strong><hr></blockquote>

What kind of sabotage are we talking about here?

[quote]Originally posted by MacGyver:
<strong>

What kind of sabotage are we talking about here?</strong><hr></blockquote>

Deleting files, unpluging stuff from the switch, unpluging stuff in computers, stupid kiddie stuff but its all political and he has full rights to the server, but he has several accounts, some are unknowen.

can you say keyboard logger!!! This will get you all the info you need. Especially if you use the type that track mousemovements or screenshots. Packet sniffer may help too`

[quote]Originally posted by Thunderwind (Steven Henry):
<strong>can you say keyboard logger!!! This will get you all the info you need. Especially if you use the type that track mousemovements or screenshots. Packet sniffer may help too`</strong><hr></blockquote>

my problem is that the person will not always use the same computer to do the deeds, a packet sniffer might be my best bet are there any that can be recomneded.

a fellow tech is starting to take the blame and I know they have nothing to do with it. please help

[quote]Originally posted by firemonkey:
<strong>

my problem is that the person will not always use the same computer to do the deeds, a packet sniffer might be my best bet are there any that can be recomneded.

a fellow tech is starting to take the blame and I know they have nothing to do with it. please help</strong><hr></blockquote>

What OS are you using?

With Novell, there are some tools that allow you to log account usage straight from the box, if you know which account to log, that is.

I'm sure there are other possibilities for NT/2000, but I can't recall any off hand.

Keyloggers are good if they can remain invisible to the user. Cover your assets by making sure the administration knows - and approves - what you are doing ahead of time.

I've heard that SpecterSoft (sp?) is quite good and completely invisible to the user. It logs keystrokes, mouse clicks and can be set to take screenshots at variable intervals. Crank the int down and you almost get a full motion vid of what the dude is doing. Problem is, again, you have to know which computers he might be using....or, install it on every computer in the company.....