Our monitors are being stolen

[donbott]

We are installing flat screen monitors in our call centers, and people are walking off with them. We have used security cables to lock down equipment, but I was wondering if there was software that would detect the monitor being unplugged and email the floor supervisor, or otherwise alert someone.

I haven't found anything Googling and would appreciate anyones help.

DOnBott

 

[Serbtastic]

Have the security cables not worked?

 

[drew1701d]

are they being stolen, or is another department taking them? you need asset management and if people can just come and go as they please you need this ->

http://www.computersecurity.com/pctab/

 

[tazuk]

Just seen that you've now had a suggestion that should suit your needs better than a software solution, however since I'd already written this...

Peaked my interest as my customers face similar issues with their hardware on site.

As you say there's nothing about on Google, however I'll make a couple of suggestions (as yet untested as I'm posting from the sofa). Assuming all target machines are running Windows 2000 / XP:

1. Do you have access to coders? If so you could commission a custom application that runs as a service and periodically calls the GetSystemMetrics() API (with flag SM_CMONITORS) to poll the number of currently attached monitors and sending an alert via email / other method.

2. Does a physical monitor disconnection leave an event log alert? If so you could use a commercial application to monitor the events log for the relevent event and send the required alert.

3. Does a physical monitor disconnection cause a registry change (perhaps under the HKEY_LOCAL_MACHINE\HARDWARE\DEVICEMAP\VIDEO\ area)?
I'd suggest running a registry monitor whilst you unplug a monitor. If a change can be identified you should be able to create an audit event for the specific key value, and then monitor the log for the event as with 2.

If I get the opportunity over the next few days I'll try and run some tests. At the moment IMHO I'd prefer options 2 or 3 over 1, as any constantly running application will have some impact on client performance.

HTH

TazUk

Blue-screening PCs since 1998

 

[eyec]

mini surveillance cameras are cheaper and will help rid your company of questionable employees.

 

[SamBones]

The problem with software monitoring the existence of the monitor (the "monitor monitor" if you will) is that it will only catch it if the machine is on. The power switch defeats this.

You need to approach it from two sides, prevention, and detection.

For detection, I agree with eyec that surveillance cameras might be the best solution. Depending on your budget and how bad the problem is, you might look into RFID or maybe those little alarm things they use in stores to prevent shoplifting. Or how about those alarms they use on electronic gear at stores, so when something is removed, an alarm starts screaming.

For prevention, how about better cables? Are they being cut? Why aren't they working?

Do you have security guards. Does management lock these rooms at night? Does the night cleaning crew have keys?

You can also employ policy as a preentative measure. If you suspect employees, you should have an employee communication that states clearly that removal of equipment without authorization is not permitted and will be punished up to and including dismissal (I think our policy is worded something like that). You might also include something about any employees that know of another employee removing equipment, but not reporting it is also reesponsible, etc, etc. There might be other people that know these things are going on and who is doing it.

 

[michigan]

Donbott - there are some great suggestions, however I think your cheapest & quickest solution in this case would be the minivideo cameras as eyec suggested.

Actually, to take that one step further, a small web-cam may do the trick - Not only real time monitoring, but recording if/when you're not around.

More importantly though I think SamBones and Taz identified long term issues that need to be made very clear to your employees. And lastly, items that cost over $100 would be considered a felony (state/local law) if they were caught. Sometimes the fear of what "may" happen if they're busted can deter further items being stolen.
Good Luck.

 

[donbott]

Thanks to all for the advice.

the cables we have used can be defeated by someone who really tries. We do have security cameras at the exits, but the flat screens are easy to conceal in a bag.

I'm mostly a phone guy, but I do some network too. Our network monitor should be able to detect a PC shutdown with Solar Winds I think, and I forwarded Tazuk's technical sugestions to our PC group.

Thanks again

DOnBott

 

[SamBones]

Another thought, replace the screws that hold the video cable with those security screws that can't be unscrewed without a special tool. That can be defeated too, but it may slow them down enough to get caught.

 

[rn4it]

You may want setup a couple cameras in the call center, in a way that views the room and not a particular individual. This way you can see what's happening to them. Even if you have a empty cubicle set one up for it and a single PC and monitor as a decoy.

 

[SamBones]

Another idea, a small pressure sensitive mine, strategically placed. Although that may violate company policy and local ordinances (no pun intended), it would discourage second and successive thefts.

 

[donbott]

Your joke sort of bombed (pun intended - I take pride in my work) Now my six foot ladder is missing, although in all fairness it may show up. We did have a roll of carpet go bye-bye.

Well 'tis the season to share.

Thanks'

DonBott

 

[SamBones]

Hmmm, I'm just trying to picture someone trying to hide a six foot ladder in their pants to get it by security!

A roll of carpet?!? That's another interesting theft!

You definitely need cameras! Or a someone standing guard.

 

[greyted]

Reckon the ladder was rolled up in the carpet. Is someone starting up their own business in your organisation?






Men occasionally stumble over the truth, but most of them pick themselves up and hurry off as if nothing ever happened.

Sir Winston Churchill

 

[dkediger]

Yeah - There are bigger problems there than just monitors walking off.

 

[robbieguy2003]

Are you working in a correction facility/prison with repeat offenders?

These people are little sods. I reckon you install IP Servo controllers linked to cattle prods/mild electric shock devices and monitor these people on camera, add a shock when they try leaving work with more than they came with and your done

On another note, if these people are technically nicking monitors what are they using to work?

I wish someone would just call me Sir, without adding 'Your making a scene'.

Rob

 

[donbott]

Well at least the ladder turned up - a contractor took it to one of our other sites.
We're going to add more cameras and try t oget the supervisors to be more alert.

Thanks to all

DonBott

 

[eyec]

if you need to buy more monitors; ask around work - maybe someone has a couple to sell

 

[iownroot]

Actually you need to approach it from three directions. Preventive, Detective, and Administrative. Administration should be heavily involved in this (mainly to create stern policies in regards to the penalties for doing this).

CISSP, MCT, MCSE2K/2K3, MCSA, CEH, Security+, Network+, CTT+, A+

 

[orypecos]

Are you working in a correction facility/prison with repeat offenders" comment made me laugh, but the sad thing is we all are working in a non correction facility that is peopled wth repeat offenders all about. Accounting, janitorial, managment, call center, U can find them anywhere.
With this in mind, I would ask around about people that are known to have stolen other peoples food or other items about the premises. These repeat offenders are usually known in a facility and they should be watched when their shift ends. In addition, I hate to say this, but 'graveyard' shifts have a higher percentage of sociopaths that have a tendancy towards lacency.
I like the idea of using the screws that only open with a special tool.
At last resort, fire the marginal employees that U have been thinking of firing before, but don't give them any warning, and watch them pack their stuff up and don't let them touch their computer before they leave. In addition, make sure U turn off their remote access and remove their mailbox. Turn off system wide remote access codes too. U wouldn't believe how many companies have remote access codes for their telephonee systems that haven't been changed for years. Avaya had the same codes for years without changing them with thousands being laid off and fired.