Re: Auditing

From: Tim Hines, MCSE (nupe009@carolina.rr.com)
Date: 08/29/02 

From: "Tim Hines, MCSE" <nupe009@carolina.rr.com>
Date: Thu, 29 Aug 2002 17:21:14 GMT

this should be configured in the default DC policy not at the domain level. 

--
Tim Hines, MCSA, MCSE (2000 & NT4)
"Bryce Shaw" <bryce@silicon-wafers.com> wrote in message
news:#FHibY3TCHA.1992@tkmsftngp10...
> Hi Everyone,
>
> It seems I'm having a problem setting up auditing.  I had previously set
up
> account lockout after 3 bad hits....you know....to help keep the bad guys
> out.  And two people on my network keep having their accounts tripped.  So
I
> tried to set up Logon/Off auditing.  I open the MMC for Domain Security
> Policy and expanded "Local Policies" and expanded "Audit Policy" and then
I
> set Audit account logon events  to  Success, Failure.
>
> And from what I know, I thought that was all I had to do, but my security
> log is still empty.  Am I missing a step or something?
>
> Thanx for any help,
> Bryce Shaw
>
>

Relevant Pages

  • Re: Auditing
    ... > this should be configured in the default DC policy not at the domain ... >> tried to set up Logon/Off auditing. ... I open the MMC for Domain Security ... >> set Audit account logon events to Success, ...
    (microsoft.public.win2000.security)
  • Re: Domain
    ... Domain Controller Security Policy has all user rights assignments ... Configuring ipsec policy at the domain level ...
    (microsoft.public.win2000.group_policy)
  • Re: Security hierarchy
    ... policy level also. ... >>can be configured only at domain level. ... Try running security configuration and ... >>try not to change domain and domain controller policy, ...
    (microsoft.public.win2000.security)
  • Re: Login Scripts
    ... Default Domain Policy) that contains the "baseline" settings that users ... at the OU level will override settings declared at the domain level, and GPO ... > domain if no MSI package is found. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Security hierarchy
    ... OK - last night I managed to reset the password policy. ... I had to boot into DS restore mode in order to be able to access the ... New users had to have complex passwords. ... >> I have tried all the suggestions plus a new top GPO at domain level ...
    (microsoft.public.win2000.security)