5

Detect remote logins [closed]

view full story
linux-howto

http://serverfault.com – In my organization, the administrators always break into my PC and do some unnecessary changes .I am really tired of this. I tried looking for remote accounts and found one. I reseted its password, but still they are able to enter. Now could you all please help me knowing how they do really enter. I think they are using PsExec. So should I install some network monitor and figure it out or should put a hook into authentication APIs. thanks for your suggestions. (HowTos)