We've got a rouge admin who likes to remote into one of the servers here and monitor the employee usage of the internet in real time by watching the surf control software (talk about a waste of time). My question is, how do we set up some kind of event log or tracing on that system to find out exactly how much time this person is using the program..(say, c:\programfiles\program.exe). We'd like to do this using windows event logs. Our goal here is to see how much time he is using up by looking at this data in "program.exe" via logging on using Terminal Services. Your thoughts/posts/solutions are GREATLY appreciated.
Thanks!
Thanks!