Results 1 to 6 of 6

Thread: Tracking laptop thefts

  1. #1
    Junior Member
    Join Date
    Feb 2005
    Posts
    4

    Question Tracking laptop thefts

    Hi All,

    Could you please tell me that is there any tool/utility which will give the information about when the machine has been disconnected from network.

    Recently we lost a couple of laptops, we were not able to trace exact timings of these when it got disconnected from network. Suspect is on my co-workers, only authorised people can enter that room. I know there are lot of monitoring tools available, but difficult to monitor 100 laptops.

    Any tool/utility which alerts or logs when the laptop disconnects from network, so that we can trace who excatly was there in that floor during that particular time.

    or

    is it possible to find out from AD through time stamps/KB tickets? if so how?


    Thanks

  2. #2
    Junior Member
    Join Date
    Oct 2005
    Posts
    17
    Make sure you auditing is enabled on your security logs.

    Look for event id 538.

    ---
    Event ID 538 can be generated under one of the following conditions [1]:

    Event ID 538 Possibilities Logon Type
    Network Logoff 3
    Net use disconnection 3
    Auto-disconnect 3
    Interactive Logoff 2
    ---

    http://www.microsoft.com/technet/pro.../logonoff.mspx
    \"Luck is what happens when preparation meets opportunity.\"
    (Roman philosopher, mid-1st century AD)

  3. #3
    AO's Resident Redneck The Texan's Avatar
    Join Date
    Aug 2003
    Location
    Texas
    Posts
    1,539
    Git R Dun - Ty
    A tribe is wanted

  4. #4
    Junior Member
    Join Date
    Feb 2005
    Posts
    4
    Thanks for the reply.

    I agree that auditing tracks only when an attempt is made to DC or any other network resource, but if I don't access any of the network resource for a certain period and remove the network cable there will be no trace in audit logs...

    Going for commercial products is good when it got stolen, but am looking at some proactive mechanism than reactive.

    Please correct me if I am wrong.

  5. #5
    Senior Member nihil's Avatar
    Join Date
    Jul 2003
    Location
    United Kingdom: Bridlington
    Posts
    17,188
    Hi Pravi~ just a few questions...................

    Why do you use laptops in the first place. By design they are portable devices intended to be connected and disconnected?

    only authorised people can enter that room.
    how is that enforced?

    What about cleaners, maintenance personnel, security guards?


  6. #6
    Just Another Geek
    Join Date
    Jul 2002
    Location
    Rotterdam, Netherlands
    Posts
    3,401
    There's a cheap and simple way to prevent laptops from being stolen..

    http://search.ebay.com/laptop-security_W0QQfnuZ1
    Oliver's Law:
    Experience is something you don't get until just after you need it.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •