Re: event viewer and log-ons

From: airsupply (antonio_af81_at_hotmail.com)
Date: 07/10/03

  • Next message: airsupply: "Task Scheduler" 
    Date: Thu, 10 Jul 2003 18:14:35 +0200

    yes, you had to configure first your local group strategy , then look into
    event viewer\security for the people who has logged on the server.
    here is the step to do to activate the audit under "local group strategy"
    (for windows 2000) :

    1) open the console "local group strategy" or "domain security strategy" for
    a domain 2000.
    2) select computer settings\windows parameters\security parameters\local
    strategy and then "Audit strategy"
    3) in the right area of the windows, double click on "Audit Connection
    event" , and tick off what you want.

    NB: for Windows Nt4.0, open usrmgr and under the menu "strategy", activate
    the audit

    "panda" <sam.bixby@archbishopthurstan.hull.sch.net> a écrit dans le message
    de news: bebufq$jme$1@newsreaderm1.core.theplanet.net...
    > is there a part of event viewer that allows you to see a list of all the
    > people that have logged on to the server?
    >
    > thanks
    >
    > panda
    >
    >

  • Next message: airsupply: "Task Scheduler"

    Relevant Pages

    • Re: Auditing-- where?? and why ??
      ... but i was wondering where r the auditing files stored, ... are actively trying to harden your server. ... Audit User Access of Files, Folders, and Printers in Windows XP - ...
      (microsoft.public.security)
    • Re: Audit File Access
      ... >failures. ... We are running windows 2000 server that is a domain controller ... >Configuration, Windows Settings, Security Settings, Local Policies - Audit ... Windows Server MVP ...
      (microsoft.public.win2000.group_policy)
    • Logon Audit Issue
      ... I currently work on a Windows 2000 ... Server that audits all Login attempts to each individual ... My question is how can I take those audit files and have ...
      (microsoft.public.win2000.security)
    • Event Security
      ... We have a customer with a Windows 2000 Server and IIS, ... kicks out a failed security audit every 3 seconds, ... hacker preferably using the Windows 2000 server audit service? ...
      (microsoft.public.win2000.security)
    • RE: MS Audit logs
      ... Because you enabled every audit option, ... agent that will extract your windows logs and forward ... them to an analysis server. ... logs, generate alerts, generate responses, etc. ...
      (Security-Basics)