Re: How to write Events into the security log

From: Sudheer N (SudheerN_at_discussions.microsoft.com)
Date: 05/31/05


Date: Mon, 30 May 2005 22:45:30 -0700

Hi
    The AuthzReportSecurityEvent function only works on Windows 2000 Server
SP4 and also it requires Windows 2000 Authorization Manager,authz.h,authz.lib
and authz.dll. The server must be windows server 2003. It does not support
for all systems. I want any function which works on all systems (like
reportsecurityevent function which works on all systems).
I tried also by setting the SeSecurityPrivilege and SeAuditPrivilege for the
system and used with reportsecurityevent(). This is also not worked. Please
help me in this issue.

Sudheer

"Joe Richards [MVP]" wrote:

> I posted a bad link previously, I meant
>
> http://msdn.microsoft.com/library/default.asp?url=/library/en-us/debug/base/reportevent.asp
>
> It indicates that for XPSP2 you need to use something else
>
> As of Windows XP SP2, this parameter cannot be a handle to the Security log. To
> write an event to the Security log, use the AuthzReportSecurityEvent function.
>
>
> Before this, you have to make sure you enable the appropriate privilege - off
> the top of my head I believe it was SeSecurityPrivilege.
>
> There are no other mechanisms to write to the event logs.
>
> joe



Relevant Pages

  • Auditing logon and logoff isnt getting into Security log
    ... I'm trying to setup logon auditing for a windows 2000 server, ... nothing is getting written into the security log. ...
    (microsoft.public.win2000.security)
  • Re: Windows server 2003 Security Log
    ... > It seems like my Windows 2003 Server is logging way too many events in the ... > security log. ... MVP for Windows Server - Management ...
    (microsoft.public.windows.server.general)
  • RE: Logging on/off
    ... I have the same problem on my Windows Small Business Server 2003. ... last 14 days the security log is full with 172.000 records of successfull ... In the same IP-Subnet ist a Windows SBS 4.5. ...
    (microsoft.public.windows.server.general)
  • Re: Would a full event log file give me serious problems
    ... log on to a computer that is running Windows XP or Windows ... How To Prevent Auditable Activities When Security Log Is Full ... RPC "Server is Unavailable" Message When Audit Log is Full ... The event log stops logging events before reaching the maximum log size ...
    (microsoft.public.windowsxp.general)
  • Re: Windows login packets / events
    ... NT4 domain) and have a network capture over a period of time. ... Also is there an event in the security log which shows that a user has ... How about enabling audit of logon events on Windows 2000 Server itself? ...
    (microsoft.public.security)