Forum Discussion
Windows 10 activity history and your privacy
If you want to monitor your users activity you should not look at "activity history", instead you should implement sysmon. You can configure sysmon.exe, applocker policies and windows event logging to log everything you can imagine happening on a machine, and then forward the logs to a central logging server. There you can analyze the logs with any tools that allow event log analysis (or, if you have the time, you could just use eventvwr.exe).
Everything you need for this is either builtin or free:
Sysmon: https://docs.microsoft.com/en-us/sysinternals/downloads/sysmon
Event Collector: https://docs.microsoft.com/en-us/windows/win32/wec/windows-event-collector?redirectedfrom=MSDN
Applocker: https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/applocker/applocker-overview
Please be careful to do this in a accordance to your data privacy laws!
Dear dretzer
Thank you very much for your advise. I do aware on the Privacy concern on this matter. In fact, I would prefer to view on GUI base as this is for management purpose.
Anyway, thanks for your sharing and really appreciate it.
Regards
TZ