Remote Management Audit

The Remote Management Audit option enables you to store information about the remote management sessions running on the managed workstations as log files. This feature runs automatically when any remote management session is initiated with a workstation. These audit files are stored in the AUDITLOG.TXT file, which is created and updated when there are no remote management sessions in progress. The information that can be found in these files includes the following:

• Start Time Start time of the event occurrence.

• Duration Duration of the remote management session.

• Console DN Name of the management workstation.

• Console User DN Name of the remote operator.

• Operation Code The various operations that a management console user can perform on the managed workstation. These codes are as follows:

  Remote Control = 1Remote View = 2File Transfer = 3Remote Execute = 5Remote Diagnostics = 6

• Operation Status The status of the event indicates whether the particular event was a success or failure. 1 indicates that the remote management operation was successful and 0 indicates that the remote management operation was unsuccessful.

An example of an audit record is as follows:

1005572546000 1000 workstation1 admin.novell 1 0

The AUDITLOG.TXT file will store up to 100 of these records in the system directory. You can store more records than this in a centralized database by installing the workstation inventory agent on every managed workstation. The inventory scanner will then collect the records and store them as scanned data files in the scan directory on the inventory server. You can then configure the number of audit records that can be stored for each workstation on the RM Audit tab of the Inventory Database Object.