Re: Audit Logon Events

From: Steven L Umbach (n9rou_at_n0-spam-for-me-comcast.net)
Date: 12/16/04


Date: Thu, 16 Dec 2004 05:38:25 GMT

Auditing policy is computer policy. Enable it via the GPO for that OU to
enable the computers in that OU to audit all users that logon to those
computers. -- Steve

"VFisher" <VFisher@discussions.microsoft.com> wrote in message
news:876509F8-93C0-4F38-B28C-B62E050CFFB1@microsoft.com...
> Is it possible to audit successful logon event for a single group of users
> or
> computers? Our default domain controller policy currently only audits
> failure events. We'd like to know if people are successfully logging into
> a
> specific set of computers in the domain (they are all in the same OU).
>
> Thanks.



Relevant Pages

  • Re: Control User Access in SBS2000 Domain
    ... Security Policy on those computers and check the user right for logon ... > new XP Professional computers which have been added to the domain ...
    (microsoft.public.win2000.security)
  • Re: better way to limit users/group to logon to specific workstati
    ... You can still do it in policy, ... logon locally setting, and apply it to all computers except the ones you ... Workstations" attribute - applying to the user accounts ...
    (microsoft.public.windows.group_policy)
  • RE: Passwords
    ... change password at next logon" check box, ... Start the Active Directory Users and Computers tool, ... Click the Group Policies tab, click the Default Domain Controllers ... Expand the following items in the policy: ...
    (microsoft.public.win2000.security)
  • Re: Login Restriction for multible system at same time
    ... There is no built in policy setting to do such. ... properties/account/logon to in ADUC to allow logon only to certain computers and you ... > How restrict the user to logging on multible system at same time.. ...
    (microsoft.public.win2000.group_policy)
  • "Enter Network Password" popup on all IE pages
    ... It has started appearing on other computers. ... >computer is set to audit all events even though the ... >workstation, installed a new user and the problem still ... >>domain workstation accounts. ...
    (microsoft.public.win2000.group_policy)