Re: Log of Logon's

From: Keith W. McCammon (km@km.com)
Date: 01/31/03


From: "Keith W. McCammon" <km@km.com>
Date: Fri, 31 Jan 2003 13:23:32 -0500


Everything is logged to the event viewer (Security, specifically).

"Scott Wilhelm" <swilhelm@sllboces.org> wrote in message
news:#zkDCNVyCHA.640@TK2MSFTNGP12...
> Keith:
>
> I read up on auditing, went into local & domain policies & set it, but now
I
> have no clue on how to view the log for it.
>
> Any ideas?
>
> Thanks,
>
> Scott
>
>
>
> "Keith W. McCammon" <km@km.com> wrote in message
> news:OV8SgDUyCHA.1624@TK2MSFTNGP11...
> > One word: auditing. Read about it. Use it. It will make your life
> > easier...
> >
> > "Scott Wilhelm" <swilhelm@sllboces.org> wrote in message
> > news:eT1PkBUyCHA.1112@TK2MSFTNGP10...
> > > How would I go about either finding or creating a log of who's logging
> > onto
> > > certain computers?
> > >
> > > I'm in an educational setting, and we're finding that the students can
> be
> > > somewhat destructive with the equipment (who would have thought), and
> > we're
> > > trying to figure out a way to find who might be the culprit.
> > >
> > > Any & all help would be appreciated.
> > >
> > > Thanks,
> > >
> > > Scott
> > >
> > >
> >
> >
>
>



Relevant Pages

  • Re: audit user activity
    ... you can set filter to view the Security log for a particular user. ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ... Right-click Small Business Server Auditing Policy and click Edit. ...
    (microsoft.public.windows.server.sbs)
  • Re: Pen-testing Internships?
    ... I know that Wells Fargo has a program for IT auditing where they go to ... > very good resource for learning and collaboration among IT Security ... Cenzic has the most comprehensive solutions to meet your application security penetration testing and vulnerability management needs. ... You have an option to go with a managed service or an enterprise software. ...
    (Pen-Test)
  • RE: Sharing Folder and Files
    ... you need to enable Local Security Auditing and then auditing on your ... The audited entries can be viewed under Event Viewer --> Security. ... --> Enable auditing on your folders. ...
    (microsoft.public.win2000.file_system)
  • Re: Audit Failures/READ_CONTROL SYNCHRONIZE
    ... am I trying to use auditing for something it was not ... >: If you're using Windows 2000 then you're going to see a lot of yucky events>: like this. ... Access failures often occur normally, Explorer in particular>: often tries to open files with maximum privilege,>: and then use the failure as a UI cue- it will display the file differently. ... >: For instance, if you don't have Full Control on a file, Explorer will notice>: and disable parts of the security dialog. ...
    (comp.os.ms-windows.nt.admin.security)
  • Re: How to trace a deleted file on a server by a user
    ... If you didn't have security auditing enabled, ... want to audit every single file operation. ... MCSE, CCEA, Microsoft MVP - Terminal Server ...
    (microsoft.public.win2000.termserv.apps)