Audit Account Management

From: ctowndu33 (ctowndu33_at_discussions.microsoft.com)
Date: 06/14/05 

Date: Tue, 14 Jun 2005 11:19:14 -0700

We have set under our domain group policy to audit success and failure on our
account management. We had an instance of someone resetting our domain admin
password and don't want it to happen again. But, even after turning on this
under our default domain gp and default domain controller gp, we are not
getting any messages under our security event log. Anyone have an idea that
we have missed?

Relevant Pages

  • Re: Server03 Std, one user has Event ID 675, no shares.
    ... Well I logged on to a DC(as domain admin) and ran netdom receiving the ... Logon failure: unknown user name or bad password. ... where the computer/machine account is stored. ... terminals server, and the console of the file server. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Deleted Machine account..
    ... are you using an account that is domain admin? ... I tried renaming the machine and rejoining, same failure.. ... I have a feeling something in the local machine is blocking me from ...
    (microsoft.public.win2000.active_directory)
  • Auditing Questions
    ... Does Auditing of events (example is Account Management ... Success and failure) is replicated to a Domain? ... What is the difference of doing the audit in Domain ...
    (microsoft.public.win2000.active_directory)
Quantcast