Comments on: How can I monitor my employees desktops? Is it legal? Where is the line…? Video monitoring or a key logger? http://www.asktheadmin.com/2008/10/how-can-i-monitor-my-employees-desktops-is-it-legal-where-is-the-line%e2%80%a6-video-monitoring-or-a-key-logger.html Fri, 03 Feb 2012 06:08:50 +0000 hourly 1 http://wordpress.org/?v=3.3 By: JB http://www.asktheadmin.com/2008/10/how-can-i-monitor-my-employees-desktops-is-it-legal-where-is-the-line%e2%80%a6-video-monitoring-or-a-key-logger.html/comment-page-1#comment-8647 JB Thu, 09 Oct 2008 20:56:05 +0000 http://ata.inspiritnetworks.com/2007/07/how-can-i-monitor-my-employees-desktops-is-it-legal-where-is-the-line%e2%80%a6-video-monitoring-or-a-key-logger.html#comment-8647 I use this little gem off of sourceforge called Advanced Remote info http://sourceforge.net/projects/ari/. Can be fiddly at times but gets the screenshots I need when I can smell that they are up to no good. I use this little gem off of sourceforge called Advanced Remote info http://sourceforge.net/projects/ari/.

Can be fiddly at times but gets the screenshots I need when I can smell that they are up to no good.

]]> By: Nina http://www.asktheadmin.com/2008/10/how-can-i-monitor-my-employees-desktops-is-it-legal-where-is-the-line%e2%80%a6-video-monitoring-or-a-key-logger.html/comment-page-1#comment-8644 Nina Thu, 09 Oct 2008 16:57:55 +0000 http://ata.inspiritnetworks.com/2007/07/how-can-i-monitor-my-employees-desktops-is-it-legal-where-is-the-line%e2%80%a6-video-monitoring-or-a-key-logger.html#comment-8644 we use big brother. we use big brother.

]]> By: Peter http://www.asktheadmin.com/2008/10/how-can-i-monitor-my-employees-desktops-is-it-legal-where-is-the-line%e2%80%a6-video-monitoring-or-a-key-logger.html/comment-page-1#comment-8633 Peter Thu, 09 Oct 2008 00:34:56 +0000 http://ata.inspiritnetworks.com/2007/07/how-can-i-monitor-my-employees-desktops-is-it-legal-where-is-the-line%e2%80%a6-video-monitoring-or-a-key-logger.html#comment-8633 I used Spector Pro on one occassion where we believed an employee was stealing company data. It showed that they were and they were fired for it. I wasn't directly involed in the firing, but I'm sure the data it collected made it a pretty open and shut case. It's really scary how much data it can collect. My understanding is that once you have a monitoring policy in place and employees agree to it, you can legally monitor at will but you need to treat the whole thing like wiretapping. You can monitor for specific events or when you believe there is unauthorized activity going on, but you can't monitor specific employees "just for the hell of it" and you can't continue to monitor what you know to be personal data and communications. I used Spector Pro on one occassion where we believed an employee was stealing company data. It showed that they were and they were fired for it. I wasn’t directly involed in the firing, but I’m sure the data it collected made it a pretty open and shut case.

It’s really scary how much data it can collect.

My understanding is that once you have a monitoring policy in place and employees agree to it, you can legally monitor at will but you need to treat the whole thing like wiretapping. You can monitor for specific events or when you believe there is unauthorized activity going on, but you can’t monitor specific employees “just for the hell of it” and you can’t continue to monitor what you know to be personal data and communications.

]]> By: anewera http://www.asktheadmin.com/2008/10/how-can-i-monitor-my-employees-desktops-is-it-legal-where-is-the-line%e2%80%a6-video-monitoring-or-a-key-logger.html/comment-page-1#comment-8632 anewera Wed, 08 Oct 2008 16:20:04 +0000 http://ata.inspiritnetworks.com/2007/07/how-can-i-monitor-my-employees-desktops-is-it-legal-where-is-the-line%e2%80%a6-video-monitoring-or-a-key-logger.html#comment-8632 i have a tool, but using it more than a once in a long while is cruel and therefore i will not share it. i have a tool, but using it more than a once in a long while is cruel and therefore i will not share it.

]]> By: Rarst http://www.asktheadmin.com/2008/10/how-can-i-monitor-my-employees-desktops-is-it-legal-where-is-the-line%e2%80%a6-video-monitoring-or-a-key-logger.html/comment-page-1#comment-8631 Rarst Wed, 08 Oct 2008 16:18:42 +0000 http://ata.inspiritnetworks.com/2007/07/how-can-i-monitor-my-employees-desktops-is-it-legal-where-is-the-line%e2%80%a6-video-monitoring-or-a-key-logger.html#comment-8631 We are using radmin at work. Without passwords (which brings security below zero). Don't look at me, I am not the one who made and enforced such... interesting setup. :) We are using radmin at work. Without passwords (which brings security below zero). Don’t look at me, I am not the one who made and enforced such… interesting setup. :)

]]> By: Karl L. Gechlik | AskTheAdmin.com http://www.asktheadmin.com/2008/10/how-can-i-monitor-my-employees-desktops-is-it-legal-where-is-the-line%e2%80%a6-video-monitoring-or-a-key-logger.html/comment-page-1#comment-8630 Karl L. Gechlik | AskTheAdmin.com Wed, 08 Oct 2008 15:38:07 +0000 http://ata.inspiritnetworks.com/2007/07/how-can-i-monitor-my-employees-desktops-is-it-legal-where-is-the-line%e2%80%a6-video-monitoring-or-a-key-logger.html#comment-8630 Yes there will be a follow up article Mike and we would love to hear what our users are doing as well. Stay tuned. Yes there will be a follow up article Mike and we would love to hear what our users are doing as well. Stay tuned.

]]> By: Mike B http://www.asktheadmin.com/2008/10/how-can-i-monitor-my-employees-desktops-is-it-legal-where-is-the-line%e2%80%a6-video-monitoring-or-a-key-logger.html/comment-page-1#comment-8629 Mike B Wed, 08 Oct 2008 15:24:14 +0000 http://ata.inspiritnetworks.com/2007/07/how-can-i-monitor-my-employees-desktops-is-it-legal-where-is-the-line%e2%80%a6-video-monitoring-or-a-key-logger.html#comment-8629 I kinda feel like this article is half finished. Yes, as an admin I'm looking for ways to do this on the cheap since my company doesn't wanna spend money, yet complains when we can't, and VNC is too obvious, so I was hoping you'd have other solutions and more information, but you stopped right as you started asking questions that peaked my interest as to what might be available. You also began the article showing several apps you've tried, leading up to the fact that you may have found something better, then just stopped. Will there be a follow up to this? I kinda feel like this article is half finished. Yes, as an admin I’m looking for ways to do this on the cheap since my company doesn’t wanna spend money, yet complains when we can’t, and VNC is too obvious, so I was hoping you’d have other solutions and more information, but you stopped right as you started asking questions that peaked my interest as to what might be available.

You also began the article showing several apps you’ve tried, leading up to the fact that you may have found something better, then just stopped. Will there be a follow up to this?

]]> By: The Slothman http://www.asktheadmin.com/2008/10/how-can-i-monitor-my-employees-desktops-is-it-legal-where-is-the-line%e2%80%a6-video-monitoring-or-a-key-logger.html/comment-page-1#comment-3315 The Slothman Thu, 26 Jul 2007 16:55:00 +0000 http://ata.inspiritnetworks.com/2007/07/how-can-i-monitor-my-employees-desktops-is-it-legal-where-is-the-line%e2%80%a6-video-monitoring-or-a-key-logger.html#comment-3315 I didn't say we actually did this, because we don't. Only one time in 6 years did I have to snoop on someone at my current employer, but we reserve the right to! ;-)<br/><br/>You do hit on a good point though Karl, about how HIPPA, Sarb-Ox, and the new electronic document discovery rules for litigation has placed an undue strain on IT and taken us away from internal security which is at times much more important than perimeter security.<br/><br/>It is a difficult balancing act we have as IT Admins. Fortunately at my company, if someone is slacking and wasting time online, they are identified early by their supervisors long before I have to get involved and they are shown the door. I didn’t say we actually did this, because we don’t. Only one time in 6 years did I have to snoop on someone at my current employer, but we reserve the right to! ;-)

You do hit on a good point though Karl, about how HIPPA, Sarb-Ox, and the new electronic document discovery rules for litigation has placed an undue strain on IT and taken us away from internal security which is at times much more important than perimeter security.

It is a difficult balancing act we have as IT Admins. Fortunately at my company, if someone is slacking and wasting time online, they are identified early by their supervisors long before I have to get involved and they are shown the door.

]]> By: Karl L. Gechlik http://www.asktheadmin.com/2008/10/how-can-i-monitor-my-employees-desktops-is-it-legal-where-is-the-line%e2%80%a6-video-monitoring-or-a-key-logger.html/comment-page-1#comment-3314 Karl L. Gechlik Thu, 26 Jul 2007 16:32:00 +0000 http://ata.inspiritnetworks.com/2007/07/how-can-i-monitor-my-employees-desktops-is-it-legal-where-is-the-line%e2%80%a6-video-monitoring-or-a-key-logger.html#comment-3314 All excellent points but we want to stress that because Sloth and I have similar setups this might not apply to you.<br/><br/>Certain industries (Health Care, Gov't Offices, etc.) That this will not fly in - chances are people in these categories have their hands full with other mandatory computer policies like data retention and password age.<br/><br/>Certain rules need to be followed in certain circumstances - how are you dealing with this and do you have any recommendations or suggestions? All excellent points but we want to stress that because Sloth and I have similar setups this might not apply to you.

Certain industries (Health Care, Gov’t Offices, etc.) That this will not fly in – chances are people in these categories have their hands full with other mandatory computer policies like data retention and password age.

Certain rules need to be followed in certain circumstances – how are you dealing with this and do you have any recommendations or suggestions?

]]> By: The Slothman http://www.asktheadmin.com/2008/10/how-can-i-monitor-my-employees-desktops-is-it-legal-where-is-the-line%e2%80%a6-video-monitoring-or-a-key-logger.html/comment-page-1#comment-3313 The Slothman Thu, 26 Jul 2007 16:21:00 +0000 http://ata.inspiritnetworks.com/2007/07/how-can-i-monitor-my-employees-desktops-is-it-legal-where-is-the-line%e2%80%a6-video-monitoring-or-a-key-logger.html#comment-3313 As long as you have a written policy that every employee must see and sign, as well as see and sign after there are amendments to it, then you are entitled to monitor the computer access in any manner that you see fit to do.<br/><br/>That is essentially what our legal counsel told us.<br/><br/>Also, having researched this, there is cases after cases of people trying to sue employers for monitoring and pretty much every time the employer wins.<br/><br/>Here's the gist of it. The employer own the machine and the network connection, therefore they are liable for all contents traversing that network and residing on the machines, be it servers or desktops. Therefore the company must protect itself against the liability and can use any manner necessary and employees are should have no reasonable expectation of ANY privacy with a corporate machine on a corporate network. As long as you have a written policy that every employee must see and sign, as well as see and sign after there are amendments to it, then you are entitled to monitor the computer access in any manner that you see fit to do.

That is essentially what our legal counsel told us.

Also, having researched this, there is cases after cases of people trying to sue employers for monitoring and pretty much every time the employer wins.

Here’s the gist of it. The employer own the machine and the network connection, therefore they are liable for all contents traversing that network and residing on the machines, be it servers or desktops. Therefore the company must protect itself against the liability and can use any manner necessary and employees are should have no reasonable expectation of ANY privacy with a corporate machine on a corporate network.

]]>