+ Post New Thread
Results 1 to 13 of 13
How do you do....it? Thread, Track Users IE History on a Domain in Technical; Hi Guys, Looking for some advice on where I'm going wrong! trying to 'track' users history on a 2008 domain ...
  1. #1
    DriftGrant's Avatar
    Join Date
    Oct 2009
    Location
    Hampshire
    Posts
    45
    Thank Post
    19
    Thanked 8 Times in 4 Posts
    Rep Power
    11

    Red face Track Users IE History on a Domain

    Hi Guys,

    Looking for some advice on where I'm going wrong! trying to 'track' users history on a 2008 domain with xp clients. I dont have access to the firewall as its located at our LEA, and the head has asked me to make it user specific.

    I wrote this little script using IEHistoryView to record users history (to run on logoff) into a hidden share on my server, but when I test it on staff and student accounts it creates blank html documents!

    Code:
    @echo off
    mkdir \\srv1\ielogs$\%username%
    \\srv1\Apps\iehv\iehv.exe /shtml \\srv1\ielogs$\%username%\History.html -user %username%
    Its not permissions as iehv.exe is in a location every user has read access too and the share 'ielogs$' users have modify permissions.

    TL;DR need to track staff and student usage and be user specific

    Thanks in advance

    Grant

  2. #2

    Ric_'s Avatar
    Join Date
    Jun 2005
    Location
    London
    Posts
    7,582
    Thank Post
    107
    Thanked 761 Times in 592 Posts
    Rep Power
    179
    This will never be as reliable as putting a proxy in between to record what is being requested. IE can have its history cleared easily and the magic of InPrivate browsing prevents the history being generated in the first place.

  3. Thanks to Ric_ from:

    DriftGrant (6th May 2010)

  4. #3
    DriftGrant's Avatar
    Join Date
    Oct 2009
    Location
    Hampshire
    Posts
    45
    Thank Post
    19
    Thanked 8 Times in 4 Posts
    Rep Power
    11
    Quote Originally Posted by Ric_ View Post
    This will never be as reliable as putting a proxy in between to record what is being requested. IE can have its history cleared easily and the magic of InPrivate browsing prevents the history being generated in the first place.
    Thanks for the reply Ric_

    I've gone nazi and put a GPO inplace to ban deleting history and disabling InPrivate browsing. Need to get this setup asap to track a naughty user

  5. #4

    nephilim's Avatar
    Join Date
    Nov 2008
    Location
    Dunstable
    Posts
    11,094
    Thank Post
    1,428
    Thanked 1,692 Times in 1,265 Posts
    Blog Entries
    2
    Rep Power
    363
    why not have an ISA server put between your domain and the outside connection? you can see EVERY request then, and also set up a blacklist for sites you dont like but the LEA have allowed through?

  6. #5
    DriftGrant's Avatar
    Join Date
    Oct 2009
    Location
    Hampshire
    Posts
    45
    Thank Post
    19
    Thanked 8 Times in 4 Posts
    Rep Power
    11
    didn't really want to go down that route, I like the idea of html logs of the users history just cant seem to get it to work!

  7. #6

    nephilim's Avatar
    Join Date
    Nov 2008
    Location
    Dunstable
    Posts
    11,094
    Thank Post
    1,428
    Thanked 1,692 Times in 1,265 Posts
    Blog Entries
    2
    Rep Power
    363
    see the thing with HTML logs, is that you have to spend ages getting it to work. With ISA, its just a separate box, can be disconnected if needed too, and you can view all requests from specific IPs if you wish! much faster than sifting through HTML logs, but hey, if its what works for you then go for it! good luck in your endeavour

    (None of that was meant to sound sarcastic by the way!)

  8. #7

    3s-gtech's Avatar
    Join Date
    Mar 2009
    Location
    Wales
    Posts
    2,484
    Thank Post
    133
    Thanked 488 Times in 436 Posts
    Rep Power
    138
    We do this with a similar script - inprivate and history deletion is turned off. Works well, only fails when they pull the plug rather than log off. It's a rather lengthy .vbs script that we run, I can share it if needed - think it was sourced from here originally though.

  9. #8
    jmcdermott's Avatar
    Join Date
    Feb 2008
    Location
    Cornwall
    Posts
    164
    Thank Post
    16
    Thanked 41 Times in 33 Posts
    Rep Power
    20
    using the IEHistoryView process here in the same way, but having a web server scan the loggs and transfer all data to an mysql database. Works well.

  10. #9

    Join Date
    Feb 2006
    Location
    Derbyshire
    Posts
    1,381
    Thank Post
    181
    Thanked 211 Times in 171 Posts
    Rep Power
    64
    Quote Originally Posted by jmcdermott View Post
    using the IEHistoryView process here in the same way, but having a web server scan the loggs and transfer all data to an mysql database. Works well.
    Do you then print out the logs and tape them to a nice wooden table for photos?

  11. #10
    jmcdermott's Avatar
    Join Date
    Feb 2008
    Location
    Cornwall
    Posts
    164
    Thank Post
    16
    Thanked 41 Times in 33 Posts
    Rep Power
    20
    Quote Originally Posted by OutToLunch View Post
    Do you then print out the logs and tape them to a nice wooden table for photos?
    only occasionally, most the time just pull up a web page containing statics on one student when asked by student support staff which looks good but means nothing at all. With the way safeguarding is going having a good log which you do not have to do anything to maintain is a good idea.

  12. #11
    DriftGrant's Avatar
    Join Date
    Oct 2009
    Location
    Hampshire
    Posts
    45
    Thank Post
    19
    Thanked 8 Times in 4 Posts
    Rep Power
    11
    Quote Originally Posted by 3s-gtech View Post
    We do this with a similar script - inprivate and history deletion is turned off. Works well, only fails when they pull the plug rather than log off. It's a rather lengthy .vbs script that we run, I can share it if needed - think it was sourced from here originally though.
    would be nice if you could share that please! :-)

  13. #12

    Join Date
    Sep 2010
    Posts
    1
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Where you able to solve this issue? could you share this script please?
    Thanks.

  14. #13

    Join Date
    Nov 2010
    Location
    California
    Posts
    137
    Thank Post
    0
    Thanked 24 Times in 22 Posts
    Rep Power
    11
    I have an admin template for group policy that allows you to redirect all shell folders for users.

    One of the techs from our county office of education uses this same setup to redirect students' history to a hidden network share and then gives the guidance councelor permission to view those files.

    I could share the template with you if youd like.

SHARE:
+ Post New Thread

Similar Threads

  1. can parent domain users log into a sub domain
    By eastofsmeg in forum Wireless Networks
    Replies: 15
    Last Post: 27th January 2010, 03:04 PM
  2. Replies: 5
    Last Post: 10th February 2009, 05:33 PM
  3. audit of Users history login history
    By Scotmk in forum Wireless Networks
    Replies: 7
    Last Post: 31st January 2008, 05:50 PM
  4. Replies: 2
    Last Post: 28th January 2008, 12:56 AM
  5. 1 Domain + 1 domain + syncronised users = possible?
    By tarquel in forum Wireless Networks
    Replies: 52
    Last Post: 30th October 2006, 02:08 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •