Tracking Logons on
Windows® Terminal Server / Citrix® Sessions

CPTRAX for Windows

CPTRAX for Windows provides Real-Time Tracking of Logons and Logouts on Windows Terminal Server and Citrix® Sessions.

How is CPTRAX for Windows different than other Logon / Logout auditing tools you may be using or have tested?

  • Does not use Windows Event Logs
  • Is not a snapshot tool that only notices after changes are made
  • No changes to your Windows security configuration
  • Audits local and remote file access in real-time including identification of IP address, remote workstation and user name
  • Provides total connection time for local and remote logons

Your job just got easier because CPTRAX for Windows gives you visibility on who is logging into and out of your Windows Servers as well as Windows Terminal Server and Citrix sessions. You can even track by selected remote IP addresses. You can optionally configure alerts to be delivered via email and our desktop alert agent.

CPTRAX for Windows provides the following for terminal server / Citrix sessions and remote users via a lightweight server agent:

  • Tracking of Terminal Server and Citrix® Session Login and Logout Activity
    • IP Address of each remote session
    • Computer name of each remote session
    • User Name (including DN, SID and SAM Name)
    • Tracking can be narrowed by IP address range (for instance: track only those connections made from offsite IP addresses)
    • Total Connection Time
  • Tracking of Kerberos, NTLM and NTLMSSP Login and Logout Activity
    • IP Address where connection originated
    • Computer name
    • User Name (including DN, SID and SAM Name)
    • Tracking can be narrowed by IP address range (for instance: track only those connections made from offsite IP addresses)
    • Total Connection Time (based on logout time)
  • Track of Failed Kerberos, NTLM and NTLMSSP Login Activity
    • Specific error that occurred
    • IP Address where request originated
    • Login Name used
    • Tracking can be narrowed by IP address range (for instance: track only those connections made IP addresses in your location)
  • Receive real-time alerts via email
  • Receive real-time alerts via desktop popup (using our Alert Agent)
  • Interoperability across unrelated Domains, Active Directory Forests and stand-alone servers/workstations
  • Scalable Administration interface that enables functionality on a small network to one with thousands of servers
  • Unattended and Scheduled Reporting
  • Automatic purging of old activity logs
  • Encrypted activity logs

CPTRAX for Windows optionally provides the following for remote and local users including terminal service sessions via a lightweight server agent:

  • Tracking of File System Access:
    • open
    • create
    • rename
    • delete
    • modification (file write)
    • permissions changes
    • ownership changes
  • Tracking of Folder Access:
    • open
    • create
    • rename
    • delete
    • permissions changes
    • ownership changes
  • Denial of File System Access:
    • unwanted creates (for instance: no music or video files)
    • unwanted deletes
    • unwanted renames
    • unwanted modifications
  • Denial of Folder System Access:
    • unwanted creates
    • unwanted deletes
    • unwanted renames (for instance: prevent unwanted folder moving)
  • Receive real-time alerts via email
  • Receive real-time alerts via desktop popup (using our Alert Agent)
  • Interoperability across unrelated Domains, Active Directory Forests and stand-alone servers/workstations
  • Scalable Administration interface that enables functionality on a small network to one with thousands of servers
  • Unattended and Scheduled Reporting
  • Automatic purging of old activity logs
  • Encrypted activity logs

Selected details included in each CPTRAX for Windows report:

  • Workstation Name
  • Workstation IP Address
  • SAM Account Name
  • LDAP Account Name
  • Security Identifier (SID)
  • Total Time Logged On
  • Share Used
  • Full File System Path
  • ACL Permissions
  • Remote Computer Name for WTS/RDP Sessions
  • Remote Computer IP Address for WTS/RDP Sessions

Why choose CPTRAX for Logon and Logout Auditing? CPTRAX Product Brochure

Request a personalized web demo to see logon and logoff auditing in action!

Your request will be fulfilled within the next business day.

Active Directory and Windows File System Auditing, Monitoring and Tracking - Questions? Please call direct: 512 330 0542
Questions?Here's some easy ways to get the answers you need.
Phone
  • (512) 330-0542
  • (877) 902-5425