RE: windows 2000 security logs

• Previous message: Enrico Pastrello: "RE: Disabling sharing and group policies"
• Maybe in reply to: Trey Stevens: "windows 2000 security logs"
• Next in thread: Birl: "RE: windows 2000 security logs"
• Reply: Birl: "RE: windows 2000 security logs"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

To: diciccone@ppg.com, treystevens@comcast.net, focus-ms@securityfocus.com
Date: Tue, 9 Sep 2003 11:19:03 -0400 

You can just set permissions on the log file located at
C:\winnt\system32\config\

}-----Original Message-----
}From: Lubrano di Ciccone, Christophe (DEF) [mailto:diciccone@ppg.com]
}Sent: Monday, September 08, 2003 1:09 PM
}To: 'Trey Stevens'; focus-ms@securityfocus.com
}Subject: RE: windows 2000 security logs
}Sensitivity: Personal
}
}
}Not sure.
}You could create a short batch using dumpel.exe and filter the
}events. See Q299475 for all the windows 2000 security event
}description. I recommend to read this interesting document :
}Account Passwords and Policies (see
}http://www.microsoft.com/technet/treeview/default.asp?url=/tech
net/prodtechnol/windowsserver2003/maintain/operate/BPACTLCK.asp)
Christophe

-----Original Message-----
From: Trey Stevens [mailto:treystevens@comcast.net]
Sent: Saturday, September 06, 2003 4:51 PM
To: focus-ms@securityfocus.com
Subject: windows 2000 security logs

Is there a place in group policy in which you can define who can read the
security logs? In our shop, we have domain controllers at sites in which the
IT staffs are not domain admins but still need to be able to see the
security logs to look for account lockouts.
 
 
Thanks in advance,
 
 
T. Stevens
 

---------------------------------------------------------------------------
KaVaDo provides the first and only integrated Web application scanner and
firewall security suite that prevent Web applications attacks, the most
common form of online exploitation. Download a FREE whitepaper on Security
Policy Automation for Web Applications.
http://www.securityfocus.com/sponsor/KaVaDo_focus-ms_030818
---------------------------------------------------------------------------

---------------------------------------------------------------------------
KaVaDo provides the first and only integrated Web application scanner and
firewall security suite that prevent Web applications attacks, the most
common form of online exploitation. Download a FREE whitepaper on Security
Policy Automation for Web Applications.
http://www.securityfocus.com/sponsor/KaVaDo_focus-ms_030818
---------------------------------------------------------------------------

DISCLAIMER: The information in this message is confidential and may be
legally privileged. It is intended solely for the addressee. Access to this
message by anyone else is unauthorised. If you are not the intended
recipient, any disclosure, copying, or distribution of the message, or any
action or omission taken by you in reliance on it, is prohibited and may be
unlawful. Please immediately contact the sender or administrator@star-1.com
if you have received this message in error. Thank you.

---------------------------------------------------------------------------
KaVaDo provides the first and only integrated Web application scanner and
firewall security suite that prevent Web applications attacks, the most
common form of online exploitation. Download a FREE whitepaper on Security Policy Automation for Web Applications.
http://www.securityfocus.com/sponsor/KaVaDo_focus-ms_030818
---------------------------------------------------------------------------

• Previous message: Enrico Pastrello: "RE: Disabling sharing and group policies"
• Maybe in reply to: Trey Stevens: "windows 2000 security logs"
• Next in thread: Birl: "RE: windows 2000 security logs"
• Reply: Birl: "RE: windows 2000 security logs"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]