SOLVED
Home

Track User actions in Windows server 2016

%3CLINGO-SUB%20id%3D%22lingo-sub-295154%22%20slang%3D%22en-US%22%3ETrack%20User%20actions%20in%20Windows%20server%202016%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-295154%22%20slang%3D%22en-US%22%3E%3CP%3EI%20have%20a%20virtual%20machine%20running%20Windows%20Server%202016.%20I%20want%20to%20track%20all%20actions%20that%20user%20performs.%26nbsp%3B%3C%2FP%3E%3CP%3EEx%3A%20If%20user%20runs%20a%20python%20script%20on%20it%2C%20should%20come%20in%20windows%20logs%20or%20Application%20and%20services%20logs.%26nbsp%3B%3C%2FP%3E%3CP%3EAny%20thoughts%20on%20the%20most%20optimal%20and%20feasible%20way%20of%20doing%20it%3F%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-295291%22%20slang%3D%22en-US%22%3ERe%3A%20Track%20User%20actions%20in%20Windows%20server%202016%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-295291%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20you%20can%20see%20this%20part%26nbsp%3B%3CFONT%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fwindows-server%2Fidentity%2Fad-ds%2Fplan%2Fsecurity-best-practices%2Faudit-policy-recommendations%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fwindows-server%2Fidentity%2Fad-ds%2Fplan%2Fsecurity-best-practices%2Faudit-policy-recommendations%3C%2FA%3E%3C%2FFONT%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3Eif%20accomplish%20your%20task%20for%20specific%20event.%3C%2FP%3E%0A%3CP%3ELet%20me%20know%2C%3C%2FP%3E%0A%3CP%3EBest%20Regards%2C%3C%2FP%3E%0A%3CP%3EFabrizio%3C%2FP%3E%3C%2FLINGO-BODY%3E
Cloud_Engineer
Regular Visitor

I have a virtual machine running Windows Server 2016. I want to track all actions that user performs. 

Ex: If user runs a python script on it, should come in windows logs or Application and services logs. 

Any thoughts on the most optimal and feasible way of doing it? 

1 Reply
Highlighted
Solution

Hi you can see this part https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/plan/security-best-practices/audit-po... 

if accomplish your task for specific event.

Let me know,

Best Regards,

Fabrizio

Related Conversations
Tabs and Dark Mode
cjc2112 in Discussions on
46 Replies
Extentions Synchronization
Deleted in Discussions on
3 Replies
Stable version of Edge insider browser
HotCakeX in Discussions on
35 Replies
flashing a white screen while open new tab
Deleted in Discussions on
14 Replies
How to Prevent Teams from Auto-Launch
chenrylee in Microsoft Teams on
29 Replies
Security Community Webinars
Valon_Kolica in Security, Privacy & Compliance on
13 Replies