>Hello,
>
>Is there a way to find out who is connecting to the primary and secondary DNS to obtain access to Internet thru our LAN?? Our Internet connection is becoming slow since some users manually type the primary and secondary DNS server. All the pc's are logged with a non-administrative user, except for a few, how do i find out thru software or thru Windows who's accesing the Internet remotely? I could use a packet-sniffing software, but i think that's not the approach.
>
>Alternatively, we are using ISA Server 2004 in a Win2003 Advance Server Enterprise Edition. The only thing i would like to do is search for those pc's without going to each pc to find out and search for it remotely. Does ISA Server 2004 have an option for that??
>
>Thanks in advance,
>
>Jim.

Well one way to do it if you don't want a packet sniffer is to use ZoneAlarm on the DNS pc and check the ZA logs for port 53 accesses.