|
I don’t really want to use the SMS
Remote Control Agent but my Security Team are insisting we do because of the
lack of logging provided by Remote Assistance pre-XP SP2. Is there anything I
can do to improve the level of logging provide by Remote Assistance?
Contributed By: Cliff Hobbs
[MVP SMS]
You are right to not want to use the SMS Remote Control Agent on XP and
later OS Clients as there are significant performance gains to be made in using
Remote Assistance which is built-in to these OSs.
XP SP2 drastically improves the amount of information logged by Remote
Assistance. If you are running an earlier version of XP you can download and
installed the following hotfix which will increase the level of logging:
822407 "Remote
Assistance generates minimal event logging in Windows XP"
This a list of the new events that will be
logged during a Remote Assistance session once the hotfix has been installed:
- Remote Assistance
connection from FQDN to FQDN
- Username
- IP list that is traversed
in session
- Remote Assistance
disconnection Session time
- Time the session was
accepted
- Ticket creation Ticket
duration
- Creation of Expert ticket
(Reverse Connect)
- Ticket expiration
- Ticket deletion
- Files transferred Start
time
- End time
- Result
- File name
- Size
- XML ticket parsing
failures
- Control acceptance Start
time
- End time
- Duration
|
 |
To see other SMS
2003 Installation and Configuration related FAQs click
here. |
|
