User Activity

You can see the past activity of restricted users. You also can see "live" the current user activity from a remote computer.

1. Start "DM Net Time & Watch Administrator".

2. Select "Activity" panel.

On top of this panel is a large combo-box which contains the users which you selected in "All users" panel. You can click on the small arrow on the right side of combo box to open the list of selected users. Select one user.

Use the "Find" button from main toolbar to open the standard Find dialog. You can use this dialog to search for a specific item in list.

You can see when the user last login on workstation, how much time he was allowed and how much time he did not used. If you press "Delete" button you can remove the unused time for today.

If you click "Load" button, you can see more details about user current and past activity. The combo-box "Previous sessions" will be filled with information about each session (most recent session the first). Before loading you may adjust the time interval: since which date you need to see the user activity. You may conveniently choose the "From" date by opening the date-calendar picker control. By default the date control is set 7 days before today.

You can receive live update about activity for that user. That is: all the lists with data described below are filled with new data when the user on remote computer browses the Web, launches/finishes applications or logges on/off lock/unlock. In order to receive live update about user activity one of these conditions must be true:

You clicked "Load info" button for an user OR
You have set taskbar notifications in Options panel for either application (process) launch/finish or Web activity.

For each session you can see: the login time, log off time, how much was the total time (including the time when user locked/disconnected workstation).

When you select a different session in "Previous sessions" combo-box the information about the session is updated.. The box "Log for selected activity" contains information about selected session.

There is a combo-box "Selected activity" which you can use to toggle between session information as described below.

Launch and finish applications

In the list "Log for selected activity" you can see each application launched by restricted user: the time when he launched it, the time when he finished it and the duration (difference between end and start time). The "Net" column shows the time when the application connected to the network. This column remains empty if the application did not connect to the network. If you click on the column names in the list's header, the applications are sorted by the column you clicked. If you click again on the same column header, the order is reversed. If you right click on the list header you may select which columns to be displayed. Your choice is saved.

If you right click on an application which is not finished yet ("End (hh:mm:ss.mm)" column is empty) then you can force that application to terminate ("Kill" menu option). This menu option is disabled if the application is finished. If you have loaded statistic categories then you may add the selected application to that category. Just select the category from "Add to statistics" submenu. In order to add/load statistic categories you need to go on Statistics panel.

In order to see information about applications you must enable this option in Audit and UI page before the restricted user used the computer.

Browse Web

In the list "Log for selected activity" you can see each Web site which user visited (the "Host"). Since one Web page may require multiple Http requests there can be more than one entry in the list for the same page. Also, on the same Web page they can be items stored on different Web sites. All those items are listed. Depends on your network configuration (proxies and firewalls) the information displayed may be different. The Host is always displayed correctly.

The "Referrer" is the Web site which triggered the Http request to another site. Example: if you use the Google Web site to search something and then you click on a link from the list with found items, then Google will be the referrer for the new site.

If a site was blocked, then the letter "Y" is displayed in the "Blocked" column.

You can select Web sites in this list (multiple selection is allowed) and then right click. A context menu will be displayed. You can select from this menu:

to add selected Web sites to the blocked list for current user;
to add selected Web site family to the blocked list for current user (this option is available only for single selection). If the host name is www.runescape.com then the word between first and second dot will be extracted ("runescape") and added to the blocked list for current user. Any site that contains that word in its name will be blocked;
to add selected Web sites to the blocked list for all users;
for first selected item you can go in the application (process) list to see which process accessed this Web site;
copy in clipboard the HTTP commands.
for first selected item you can go to the keyboard log at first entry which has the timestamp equal or greater than this selected Web item (you need to enable key logger in Audit and UI page to have keyboard log).
for first selected item you can go to the screen captured in the moment this selected Web item was recorded (same timestamp or nearest) (you need to enable Screen Capture in Audit and UI page to have screen capture log).
navigate to the URL displayed by HTTP command.
If you have loaded statistic categories then you may add the selected Web site to that category. Just select the category from "Add to statistics" submenu. In order to add/load statistic categories you need to go on Statistics panel.

Session events.

This is just list with plain text where you can see:

when user logged in/out/locked/unlocked/connected/disconnected on/from workstation
when user received a bonus time
if the user did not logoff voluntary (the log off was done by DM Net Time & Watch Administrator because the time has been expired)
some errors such as: if some Web pages were lost (the IP packets were lost)

Screen captures

You can select a Screen capture from this list and then right click. A context menu will be displayed. You can select from this menu:

go to the keyboard log at first entry which has the timestamp equal or greater than this selected Web item (you need to enable key logger in Audit and UI page to have keyboard log).

go to the Web URL from the moment this selected screen was captured (same timestamp or nearest) (you need to enable Web Log in Audit and UI page to have web log).

Each recorded screenshot is listed. If there are multiple monitors, there will be one image for each monitor (DISPLAY1, DISPLAY2 etc.). The picture size is bigger if the color depth is bigger. When one row in list is selected, or double clicked, a separate window will display the screen capture. There will be one separate window for each captured monitor. The Size, Resolution and Color depth columns are empty at the beginning and will be filled with data once the image is displayed. The separate window which displays the image has a context (right click) menu - it allows user to save the image into a file and to switch on zoom (zoom to fit or 100% scale).

Record keystrokes (keylogger)

Each pressed key is recorded. You can see in which process the key was pressed. To see the process name you have to enable "Launch and finish applications" (see above). Otherwise only the process ID is displayed.

You can select an item from this list and then right click. A context menu will be displayed. You can select from this menu:

go to screen captured in the moment this selected item was recorded (same timestamp or nearest) (you need to enable Screen Capture in Audit and UI page to have screen capture log).

go to the Web URL from the moment this selected item was captured (same timestamp or nearest) (you need to enable Web Log in Audit and UI page to have web log).

Usage

The "usage" list shows which application was active at one time. Only one application can have its main window active at one moment. Each time when user switches to another application, an new entry is added in this list. It is recorded: the time, the application ID (process ID) and the application (process) name. If the user clicks on taskbar or on start button then no application is active - this is recorded as an entry with ID zero. This list is generated if "launching and finishing applications" is enabled in Audit and UI page

~.~.~.~.~.~.~.~

You can export all of able lists in a .CSV (comma separated values) file. If the "All" radio button is checked, then the data from all sessions will be exported. You can later open the file in MS Excel for further processing. The Export button from main toolbar will open the "File save" dialog.