User evaluation
Improving the integrity of a computer system including a plurality of user accounts by, for each user account, monitoring events on the computer system that are related to the user account, assigning an importance score to the monitored user account that is indicative of the importance of the monitored user account to the integrity of the computer system, the importance score being calculated from the monitored events, and providing the importance score to a system administrator upon the administrator attempting to alter the monitored user account.
1. A method for improving an integrity of a computer system comprising a plurality of user accounts, the method comprising:
monitoring, by one or more processors, a plurality of events corresponding to a first user account of the plurality of user accounts on the computer system, wherein the first user account corresponds to a first user and the monitored events are performed by one or more second users associated with the first user, and wherein the monitoring further comprises monitoring a utilization of at least one of the one or more processors by the first user of the first user account;
assigning, by at least one of the one or more processors, an importance score to the first user account that is indicative of importance of the first user account to the integrity of the computer system, the importance score being calculated from the monitored events;
providing, by at least one of the one or more processors, the importance score to a system administrator in response to detecting the administrator attempting to delete the first user account; and
enabling the system administrator to delete the first user account in response to receiving a confirmation that the system administrator has received the importance score.
2. The method of claim 1 , wherein the monitoring further comprises monitoring access of one or more files within the first user account by one or more other users.
3. The method of claim 1 , wherein the monitoring further comprises monitoring a number of executable scripts within the first user account.
4. The method of claim 1 , further comprising calculating the importance score by applying one or more respective weighting factors to one or more different types of the monitored events and combining the weighted events of the one or more different types into the importance score.
5. The method of claim 4 , further comprising receiving the one or more respective weighting factors from the system administrator prior to the calculating.
6. The method of claim 1 , wherein providing the importance score to the system administrator further comprises returning a request for the confirmation to the system administrator.
7. The method of claim 1 , further comprising providing the system administrator with a request for authorization information when the assigned importance score exceeds a defined threshold.
8. A computer program product stored in a non-transitory computer readable storage medium, comprising computer instructions therein that, when executed by an information handling system, causes the information handling system to perform actions comprising:
monitoring a plurality of events corresponding to a first user account of the plurality of user accounts on the information handling system, wherein the first user account corresponds to a first user and the monitored events are performed by one or more second users associated with the first user, and wherein the information handling system comprises at least one processor, and the monitoring further comprises monitoring a utilization of the at least one processor by the first user of the first user account;
assigning an importance score to the first user account that is indicative of importance of the first user account to an integrity of the information handling system, the importance score being calculated from the monitored events;
providing the importance score to a system administrator in response to detecting the administrator attempting to delete the first user account; and
enabling the system administrator to delete the first user account in response to receiving a confirmation that the system administrator has received the importance score.
9. The computer program product of claim 8 , wherein the monitoring further comprises monitoring access of one or more files within the first user account by one or more other users.
10. The computer program product of claim 8 , wherein the monitoring further comprises monitoring a number of executable scripts within the first user account.
11. The computer program product of claim 8 , wherein the actions further comprise calculating the importance score by applying one or more respective weighting factors to one or more different types of the monitored events and combining the weighted events of the one or more different types into the importance score.
12. The computer program product of claim 8 , wherein the actions further comprise providing the system administrator with a request for authorization information when the assigned importance score exceeds a defined threshold.
13. An information handling system comprising:
one or more processors;
a memory coupled to at least one processor of the one or more processors; and
a set of instructions stored in the memory and executed by the at least one processors, wherein the set of instructions perform actions of:
monitoring a plurality of events corresponding to a first user account of the plurality of user accounts on the information handling system, wherein the first user account corresponds to a first user and the monitored events are performed by one or more second users associated with the first user, and wherein the monitoring further comprises monitoring a utilization of the at least one processor by the first user of the first user account;
assigning an importance score to the first user account that is indicative of importance of the first user account to an integrity of the information handling system, the importance score being calculated from the monitored events;
providing the importance score to a system administrator in response to detecting the administrator attempting to delete the first user account; and
enabling the system administrator to delete the first user account in response to receiving a confirmation that the system administrator has received the importance score.
14. The information handling system of claim 13 , wherein the monitoring further comprises monitoring access of one or more files within the first user account by one or more other users.
15. The information handling system of claim 13 , wherein the monitoring further comprises monitoring a number of executable scripts within the first user account.
16. The information handling system of claim 13 , wherein the actions further comprise calculating the importance score by applying one or more respective weighting factors to one or more different types of the monitored events and combining the weighted events of the one or more different types into the importance score.
17. The information handling system of claim 13 , wherein the actions further comprise providing the system administrator with a request for authorization information when the assigned importance score exceeds a defined threshold.