Account auditing

From: James Raaymakers MCSE (jamesraa@pacbell.net)
Date: 08/14/02


From: "James Raaymakers MCSE" <jamesraa@pacbell.net>
Date: Wed, 14 Aug 2002 14:41:48 -0700


Use filters in the security event viewer.

>-----Original Message-----
>Hi!
>
>Is there a way to activate a Logon audit
(success/failure) only on one user
>account in
>Windows 2K Pro and Server? The Local Security Policies
doesn't allow that.
>
>Would it be possible to add a special registry key to get
such feature?
>
>Thanks!
>
>L.C.
>
>
>.
>



Relevant Pages

  • RE: Windows 2000 user login
    ... Unlock userīs account. ... security event viewer for event id 529: ... 529 Failure Audit Logon Failure Reason: Unknown user name or bad password ... Subject: Windows 2000 user login ...
    (Security-Basics)
  • Re: Is someone accessing my computer?
    ... Then I would disable my Guest account and remove/reset any password for ... Administrator account. ... In my Security Event Viewer Log I am ... > unkown user name or bad password. ...
    (microsoft.public.windowsxp.security_admin)
  • Event ID 680
    ... I notice continous logs of event id 680 on the security event viewer. ... Event Category: Account Logon ... My DC runs on WIndows 2000 Server SP4 and the users ... runs on WIndows NT Workstation 4.0 SP6. ...
    (microsoft.public.win2000.general)