catching someone at work....

[Tregrad]

I have a guy at work whom I suspect is watching porn at the office after hours (hate to think what else goes on) is there a program that i can install that will logg his activities on the internet after we leave or can i Passwork protect the history in IE?

[Strider]

I'm not the I.S person at work, but where I work if you surf the internet and try to go to a website that is questionable it is block and can't even be accessed. I think it's a program like cybersitter, something installed like that would probably be the best that way you know he can't access porn. The program doesn't interfer with legit websites like CNN for example. Also install somekind of keylogger program that records his keyboard strokes that way when you look at his log you can tell what websites he was trying to access.

[mairving]

You could also install one of the file recovery programs like Undelete that will show stuff like browser cache that the user has dumped. The advantage would be that you could install it look at what has been dumped and then uninstall it. It would be a little less intrusive than a key logger.

Still I can't imagine having a business without having some kind of web filter. I use Squid and Dansguardian at work running on an old P3/800Mhz. It does a great job and I don't have to worry about where people are surfing. Plus you have got to consider if he is viewing porn, he is also picking up spyware, trojans and viruses along the way.

[rightcoast]

You may very well be the boss so I say the following not knowing if that's the case.

Installing anything like that (keyloggers) if you aren't part of IS for the corp will most likely result in your termination, good intentions or not.

It may result in legal action (by the individual in question) if you aren't "the boss" as well.

A proxy filter like Strider suggested is a good way to go (suggest to mgmt if you aren't).

At least half the cases of vigilante pen testing, net policing, etc., at work end up with the termination of all involved in the cases I have seen and heard of. Tread lightly. If you are the owner however, you can pretty much do as you please. Get legal advice...and the programs serve there purpose most successfully when all employees are informed they are being installed. After all the goal is to limit the workplace to work right? Not to be aggressively seeking dismissals. No business enjoys training new employees.

After all, like it or not, porn is the largest business in America. Not appropriate for work, and that is the point you should drive home. Not a moralistic imposition of someone elses values. Every employee there has a skeleton...just make sure it stays home in it's closet.

[=Maverick=]

Originally Posted by rightcoast Installing anything like that (keyloggers) if you aren't part of IS for the corp will most likely result in your termination, good intentions or not. It may result in legal action (by the individual in question) if you aren't "the boss" as well.

Are you an attorney Rightcoast?

I know you made your post with good intentions but people dont' come here for your legal opinions or speculations on what may or may not be legal.

Tregrad,

There are so many options available as a owner or manager. Just googling the right keywords will turn up several tools (software) for your needs.

Here,

Here,

Here,

Here,

or Here.

[rightcoast]

Nope, not an attorney, just an IT professional with experience in Information Security. I have taken the Security + cert and will be taking the Certified Ethical Hacker cert this year. This is all part of the training/field Maverick.

Like you say a little Googling will turn up plenty of results for what happens when employees take it upon themselves to "secure" the network environment.

I also would like to again suggest Tregard gets legal advice if s/he is Mgmt, as it may not have been easy to spot, seeing as how easily was overlooked by you. I wouldn't want Tregard to miss that part.

Get legal advice...and the programs serve there purpose most successfully when all employees are informed they are being installed.

It doesn't take an attorney to realize you are in legal hot water for installing a malware application on a machine you are not authorized to do so on though. Don't forget along with logging "porn" activity, you will be logging all users of the machine, corporate PW's etc. Not a good idea if you don't own the company or have the permission of the CIO.

[ZYFER]

rightcoast is quite accurate, if you have ever worked in the IT field, you will certainly know these things,

Someone as the employer has the right to view every company email and everything on the computers as it is their property once it enters their network.

But if you are just a minor employee, you are infringing on the privacy of others, which violates a number of laws in most states, plus sets you up for termination from your company.
If you are a minor employee and suspect this is happening, let your boss know, he will more likely have IT look into, which is usually one of their many interesting jobs...

Also to remember, is this against company policy? most companies have a computer policy, if this isn't during this person's work period, and you have your company has no policy towards this and you find out, there is nothing you can do till the policy is changed and all employees are notified about it.
If as the boss you fire the person who doing this which isn't against ocmpany policy, then they can sue you for wrongful termination.

[Tregrad]

Thanks for all the great advice you guys, I am the owner and there is only one pc up front at the counter. I sell Granite tile and marble, as well as install it. One guy stays late and he is the one in question.
does PC-Cillin have a web blocker on it? I think it does and does anyone know (if it has it) if you can use wild cards on the url blocker thing? cause i think rightcoast is right, just blocking it would be best.
This guy is on his last string anyway so a good visit to a porn site would give me great reason to give him the ol Heave-Ho.

Again I want to thank you all for the great advice.

[rjfvillarosa]

If you are that convinced about what he is doing why not just catch him red handed, leave to go home and then return unexpectedly with some lame excuse. Go straight on the computer before he has chance to erase the memory and confront him with what you find, send him on some fools errand and interogate the machine as soon as he is out of the way. That way you will be all psyched up and ready to deal with the situation there and then instead of finding the evidence secretly and mulling it over for days before confronting him.
Nobody enjoys confrontation too much so deal with it in one foul swoop.

[nubbler]

Originally Posted by rjfvillarosa If you are that convinced about what he is doing why not just catch him red handed, leave to go home and then return unexpectedly with some lame excuse. Go straight on the computer before he has chance to erase the memory and confront him with what you find, send him on some fools errand and interogate the machine as soon as he is out of the way. That way you will be all psyched up and ready to deal with the situation there and then instead of finding the evidence secretly and mulling it over for days before confronting him. Nobody enjoys confrontation too much so deal with it in one foul swoop.

I second that.

[Tregrad]

As far as confrontation goes, that aint no biggie. In fact, I enjoy it. I just want to be able to have something in my hand when i do so I can help the guy out and be able to maintain his dignity, or whats left. He is kinda a friend (kinda) and I dont want to just beat him to the curb. Internet porn has destroyed more marriages and familys and I at least want to try and help first. If he dont change it after that then I will beat him to the curb.

[glc]

Internet porn has destroyed more marriages and familys and I at least want to try and help first.

I'd advise you not to even go there. Approach this strictly from a business standpoint, what you do after catching him red-handed is your business, your main focus should be with protecting business assets. Hopefully he will be embarrassed enough to stop surfing porn at the office, but be prepared to lose a friendship.

[suitcase]

We've had several people fired here for improperly using the net. Some for email and some for downloading mp3s. In fact, the IT got fired for setting gaming servors. He got caught when the bosses couldn't log in for the activity going on. I'm online here now and they've made alot of changes. No downloading of videos, mp3s, and tons of sites are off limits.

[SARGE]

This worked for me. Should have seen the faces I got.

http://www.spectorsoft.com/