Which client-server time attendance application to choose for a corporate environment?

Question

Windows

Hello.
The task was to control the activities of employees in the workplace (who does what, what programs they use during the working day, what sites they go to).
Anyone familiar with similar products? It is the client-server version that is of interest, so that the collected statistics do not go beyond the organization.
The enterprise has Active Directory

Answer 1

There is a sea of ​​such programs - from every minute dropping screenshots on the server to information security monsters like InfoWatch.
This is not a question of a programmer or a system administrator, but of a security guard. Then this shaft of information needs to be processed.
The question arose several times at several jobs, but as soon as it came to the price of the issue and the solution of formalities with the notification of employees, it was removed.

Answer 2

Yaware but it is not legal if you do not inform the employees and they do not sign the surveillance paper, because there will be personal data that is collected and stored there, you have no rights to this

Answer 3

Do you want to control all employees? At the expense of what software they use, it is possible to collect metrics through the event collector, who launched the application, when it launched, how long this application worked. On the Internet account, use a proxy.
Infowatch is software that prevents internal leaks, so to speak, protecting the perimeter from the inside. And yes, users will need to be notified against signature in the magazine, otherwise this is a violation of Russian law.

Answer 4

There was just a good article on Habré comparing several popular time tracking systems:
Installing a time tracking system
For myself, I use RescueTime, but it is more suitable for individual work.

Answer 5

If the enterprise has the Active Directory service installed and user synchronization is needed, then only the Bitcop Security system has full support. The rest either do not work with AD at all or only partially.