---
title: It's elementary, my dear Network Admin!
description: It's elementary, my dear Network Admin!
image: https://blog.wallix.com/hs-fs/file-2828716658-jpg/blog-files/wab_search-300x68.jpg
---

[![Wallix](https://blog.wallix.com/hs-fs/hubfs/LOGO_WALLIX_2024_black+orange-3.png?width=3108&height=827&name=LOGO_WALLIX_2024_black+orange-3.png "Wallix")](http://www.wallix.com/)

[![New Call-to-action](https://no-cache.hubspot.com/cta/default/514643/6f69a618-d11c-44ef-ad26-88703b7dcab4.png)](https://cta-redirect.hubspot.com/cta/redirect/514643/6f69a618-d11c-44ef-ad26-88703b7dcab4)

# It's elementary, my dear Network Admin!

[› › › BACK TO THE BLOG](https://blog.wallix.com)

 \[fa icon="calendar"\] Nov 7, 2014 12:22:14 PM / by [WALLIX](https://blog.wallix.com/author/wallix)

![](https://blog.wallix.com/hs-fs/hubfs/blog-files/WALLIX.png?width=35&name=WALLIX.png)

- [Tweet](https://twitter.com/share)

A friend of ours over at [@experts\_911](https://twitter.com/experts_911) found this [old post](http://thedesktopteam.com/blog/david/group-policy-management-steve-and-nicks-tale/). It tells the story of how a couple of IT admins had to turn detective and figure out who had altered a Windows Group Policy which was denying access to the internet for everyone in their business. The tale continues, explaining how they had to spend a significant amount of time looking for clues and testing policies to figure out what had changed to cause such a significant problem.

It’s at times like this that effective and accessible auditing can really help you out. With a Wallix AdminBastion you could find the root of this sort of issue in just 4 very simple steps:

1. Search the AdminBastion for Windows devices that have been accessed since this problem appeared

[![wab_search](https://blog.wallix.com/hs-fs/file-2828716658-jpg/blog-files/wab_search-300x68.jpg?width=565&height=128&name=wab_search-300x68.jpg)](https://blog.wallix.com/hs-fs/file-2828716658-jpg/blog-files/wab_search-300x68.jpg)

 

2 .Because the AdminBastion captures activity as text, images and video it’s easy to see what’s happened using the screenshot

[![wab_screens](https://blog.wallix.com/hs-fs/file-2828716668-jpg/blog-files/wab_screens-300x82.jpg?width=571&height=156&name=wab_screens-300x82.jpg)](https://blog.wallix.com/hs-fs/file-2828716668-jpg/blog-files/wab_screens-300x82.jpg)

 

3. Each of the actions shown is also a link which when clicked will play a video of what the privileged user did while logged onto that server

 

4 .The whole captured video can be downloaded for sharing or in this case for a debrief to make sure it doesn’t happen again

 

With an easily understandable audit trail you don't need to be a super sleuth wasting time hunting for clues but instead focus on keeping your business systems up and running.

You can see an overview of the features in Wallix AdminBastion in a video here:

Thanks to [@grant\_burst](https://twitter.com/grant_burst) for the screenshots

 

[![Get our FREE DEMO to manage and monitor privileged access](https://no-cache.hubspot.com/cta/default/514643/6524372a-8dc1-4142-967d-da244db57c0a.png)](https://cta-redirect.hubspot.com/cta/redirect/514643/6524372a-8dc1-4142-967d-da244db57c0a)

 Topics: [WALLIX Products](https://blog.wallix.com/topic/wallix-products)

![WALLIX](https://blog.wallix.com/hs-fs/hubfs/blog-files/WALLIX.png?width=100&height=100&name=WALLIX.png)

#### Written by [WALLIX](https://blog.wallix.com/author/wallix)

### SIGN UP to receive our best articles!

## [![Get Access to our white paper : The Insider Threats Comic Book](https://no-cache.hubspot.com/cta/default/514643/21e4442a-b1c5-4e98-a7c1-54de89072624.png)](https://cta-redirect.hubspot.com/cta/redirect/514643/21e4442a-b1c5-4e98-a7c1-54de89072624)

- Recent
- Popular
- Categories

### Lists by Topic

- [Preventing Insider Threat (91)](https://blog.wallix.com/topic/preventing-insider-threat)
- [Mitigating External Attacks (81)](https://blog.wallix.com/topic/mitigating-external-attacks)
- [Reaching IT Compliance (58)](https://blog.wallix.com/topic/reaching-it-compliance)
- [Controlling Third Party Access (33)](https://blog.wallix.com/topic/controlling-third-party-access)
- [WALLIX Products (29)](https://blog.wallix.com/topic/wallix-products)
- [Optimizing Cyber-Insurance (15)](https://blog.wallix.com/topic/optimizing-cyber-insurance)
- [Improving Cybersecurity (8)](https://blog.wallix.com/topic/improving-cybersecurity)
- [Cloud Security (4)](https://blog.wallix.com/topic/cloud-security)
- [Events (2)](https://blog.wallix.com/topic/events)

[![Get Access to our White paper : Major misconceptions about IT security](https://no-cache.hubspot.com/cta/default/514643/ce3632c6-744e-4bca-919e-6795f7c73b63.png)](https://cta-redirect.hubspot.com/cta/redirect/514643/ce3632c6-744e-4bca-919e-6795f7c73b63)

### Posts by Topic

- [Preventing Insider Threat (91)](https://blog.wallix.com/topic/preventing-insider-threat)
- [Mitigating External Attacks (81)](https://blog.wallix.com/topic/mitigating-external-attacks)
- [Reaching IT Compliance (58)](https://blog.wallix.com/topic/reaching-it-compliance)
- [Controlling Third Party Access (33)](https://blog.wallix.com/topic/controlling-third-party-access)
- [WALLIX Products (29)](https://blog.wallix.com/topic/wallix-products)
- [Optimizing Cyber-Insurance (15)](https://blog.wallix.com/topic/optimizing-cyber-insurance)
- [Improving Cybersecurity (8)](https://blog.wallix.com/topic/improving-cybersecurity)
- [Cloud Security (4)](https://blog.wallix.com/topic/cloud-security)
- [Events (2)](https://blog.wallix.com/topic/events)

see all

#### About Us

WALLIX is a software company offering privileged access management solutions to help enterprises, public organizations and cloud service providers protect their critical IT assets including data, servers, terminals and connected devices.

#### More Links

- [Homepage](http://www.wallix.com/)
- [Blog](https://blog.wallix.com/)
- [Wallix](http://www.wallix.com/company/)

#### Contact us

\[fa icon="phone"\] [Get the right number](http://www.wallix.com/contact/)

\[fa icon="envelope"\] [sales@wallix.com](mailto:sales@wallix.com)

\[fa icon="home"\] [Find the right location](http://www.wallix.com/contact/)

#### Follow Us

<https://twitter.com/wallixcom><https://www.linkedin.com/company/wallix><https://www.youtube.com/channel/UCKT58VqricukJJxBTlLonAw>

 Copyright® 2026 | Wallix - Trace, Audit & Trust

\[fa icon="chevron-up"\]

![](https://googleads.g.doubleclick.net/pagead/viewthroughconversion/880438901/?value=0&guid=ON&script=0)