Installation Logon Recording Basis. By AD Logon Name AD Logon Name(recommended) By Windows Logon Name IP Address

Transcription

1 Internet Recorder Binding User Names to AD Server & Recording Skype Text Conversation

2 Path: Recording Analysis > Setting Terminologies: AD Server (User Name Logon Name Binding) The AD logon names can be used as the basis for online activity recording. Users using the same logon name will be treated as one user. It is recommended for organizations using AD server for user authentication. Plug-in for Binding User Name to AD Server and Recording Skype Text Conversation The purposes of the plug-in: 1. Retrieve users AD logon names upon using AD service for user authentication. 2. Record Skype text conversation. Plug-in installation: 1. Onto AD Server It can be installed onto the AD server. Thereby, the plug-in will be installed onto each authenticated AD user s PC, after which it reports the logon information to the device and start recording Skype text conversation if any. (It is recommended if binding user names to AD server.) 2. Onto Skype Users PCs It can also be installed onto Skype users PCs. All the text conversations will be recorded upon taking place. (It is recommended if binding user names to IP or MAC addresses.) The recording basis varies with the name binding method. There are three possible situations: 1. Users IP addresses are used as recording basis upon binding user names to IP addresses. 2. Users MAC addresses are used as recording basis upon binding user names to MAC addresses. 3. Upon binding user names to AD server, recording basis varies in different situation. (See table 1) Installation Logon Recording Basis Onto AD Server By AD Logon Name AD Logon Name(recommended) By Windows Logon Name IP Address Onto Skype Users PCs By AD Logon Name AD Logon Name By Windows Logon Name Windows Logon Name No Installation By AD Logon Name IP Address By Windows Logon Name IP Address Table 1 Recording Basis Varies in Different Situation 2

3 When binding user names to AD server, the device requires non-ad client users to download and install the plug-in onto their computers for retrieving their Windows logon names, which are used as recording basis. If there is no AD server available and still binding user names to AD server, then the system administrator might have to ask Skype users (or do it himself) to install the plug-in onto their computers in order to retrieve their Windows logon names for recording basis as well as to record their Skype text conversation. Note: Only download the plug-in after the deployment of the device is done. Otherwise, the plug-in will not be functional. User Name Binding For company using fixed IP addresses, select IP Address (User Name-IP Binding). Network packets from the same IP address will be treated as one user. For company using DHCP distributed addresses, select MAC Address (User Name-MAC Binding). Binding user name to MAC address helps avoid IP address from unauthorized use. For company using Active Directory (AD) server, select AD Server (User Name Logon Name Binding). The user name, i.e. the AD account name, is not only used for logging on to Windows, but also for the basis of recording IP services. 3

4 Binding User Name to AD Server Step 1. Navigate to Record Analysis > Setting > Setting, and then set as below: Figure 1 Figure 1 Record Analysis Settings 4

5 Step 2. Right-click on your domain, point to New, and then click on Organizational Unit. Next, create as much user as desirable in the newly created Organizational Unit folder. Figure 2 Figure 2 Creating an Organizational Unit and Its Members 5

6 Step 3. Under User List > Logged, you will see: Figure 3 Users are displayed by the given name from the Organizational Unit in the AD server. IP address is used for user identification if the plug-in has not been installed onto the client s computer or user itself has not been authenticated. Figure 3 User Names Binding to AD Server 6

7 Step 4. Download the plug-in from the device and install it onto your AD server. Figure 4, 5 Figure 4 Downloading the Plug-In from the Device 7

8 Figure 5 Installing the Plug-In onto AD Server Step 5. After installation completed, carry out the following: Navigate to Start > All Programs > Administrative Tools > Active Directory Users and Computers, and then right-click on the domain and choose Properties. Figure 6 Select the Default Domain Policy and then click on Edit. Figure 7 In the Group Policy Object Editor window, select User Configuration > Windows Settings > Scripts (Logon/Logoff). After that, double-click on Logon scripts. Figure 8 Select the sysprotect.exe and then click Edit. Figure 9 Click OK after finish editing. Figure 10 Click OK in the Logon Properties window. Figure 11 Setting completed. The plug-in will be automatically installed onto and executed on all AD clients computers when they logging on to AD server. 8

9 Figure 6 Active Directory Users and Computers Figure 7 Domain Properties 9

10 Figure 8 Group Policy Object Editor Figure 9 Login Properties 10

11 Figure 10 Editing Logon Script Figure 11 Logon Script Configuration Completed 11

12 Step 6. A user logs on to Windows using Active Directory authentication. Figure 12 Figure 12 Logging on to an AD Domain Step 7. User name helps track and control user s online activities. Eight kinds of IP service logs are available under Record Analysis > Service. Figure 13 Figure 13 User s Online Activities 12

13 Recording Skype Text Conversation upon Binding User Names to IP / MAC Addresses Step 1. Under Record Analysis > Setting > Setting, bind user names to IP or MAC addresses based on your case. Figure 14 Figure 14 Binding User Names to IP or MAC Addresses Accordingly Step 2. Under Behavior Management > IM Management > Default Rule, select Accept: User running IR_Plugin.exe for Skype as the default login rule. Figure 15 Figure 15 Granting Skype Access to Users Running the Plug-In 13

14 Step 3. Download the plug-in from the device and install it onto Skype users computers respectively. Figure 16, 17 Figure 16 Downloading the Plug-In from the Device 14

15 Figure 17 Installing the Plug-In onto Each Skype Users PCs Step 4. Users Skype text conversations will be recorded under Recording Analysis > User Service. Figure 18 Figure 18 A User s Skype Text Conversation 15