Hi,
I need to monitor when an administrator (member of the local administrators group even if it is a domain user) interactively logs on to a scom monitored system.
Does anyone know how this can be accomplished?
I already have a rule set up that monitors the local administrator account which is not that hard to do.
Greets.