Re: add machine to domain event ID?

From: Vivaldi (sdemiraynospam@veezy.com)
Date: 11/08/02 

From: "Vivaldi" <sdemiraynospam@veezy.com>
Date: Fri, 8 Nov 2002 21:51:59 +0200

 You should turn auditing on "Audit account management" (if I remember
right). Then you should be able to see events in security log.
Selcuk Demiray

"A. Tolga KILINĒ" <kilinc@tis.havelsan.com.tr> wrote in message
news:#L7bP9jhCHA.2412@tkmsftngp12...
> Hi,
> a W2k client machine is joined to our domain , but I couldn't see a
specific
> event ID on DC. When a machine is joined to domain which events are
> generated on DC machine? and what kind of events? (system, directory
> service...etc?)
> regrads,
> Tolga
>
>

Relevant Pages

  • Re: delete user from AD and not exchange
    ... If you have audit account management turned on you will be able to find ... who and when by looking in the security log on your domain controller. ... system manager reconnect this new user to the old mailbox. ...
    (microsoft.public.exchange2000.active.directory.integration)
  • RE: How do I find out who disabled an account in AD?
    ... We have "Audit account management" set to "success,failure. ... "audit directory service object" in our AD group policy. ... My question is what do I search for in the security log? ...
    (microsoft.public.security)
  • RE: Event for Password Changes
    ... open domain controller security policy and make audit account management ... Then when user changed password, in the security log, There are several ... Windows 2003 server and SBS 2003 can also support audit ...
    (microsoft.public.windows.server.sbs)
  • Anonymous change of passwords?
    ... BTW - Windows 2003 seems to completely ignore the bit i ... but Windows 2003 doesn't modify this ... In the security log I found the ... >Audit Account Management 627 NT ...
    (microsoft.public.security)