Re: Turn Off User Logging (Event Log)

From: Scott Schreckengaust (scott.schreckengaust@aspentech.com)
Date: 02/12/03


From: "Scott Schreckengaust" <scott.schreckengaust@aspentech.com>
Date: Wed, 12 Feb 2003 10:08:07 -0800


Start > Programs > Administrative Tools > Local Security Policy > Audit
Policy

look at the "Audit account logon events" and "Audit logon events"
only do "Failure" since hopefully most will successfully logon...

I believe Domain policies will override the local policies though...

"Nick Wilson" <nfwilson@hotmail.com> wrote in message
news:OPpU7ar0CHA.1288@TK2MSFTNGP11...
> Hi there, this may seem to be a weird question, but I'll ask it anyways. I
> have an internal website that leverages NTLM authentication (CMServer site
> enabled) Every user is forced to go to this page each morning when they
> logon. My issue though is that I would like to turn off the event logging
> that is done in the security logs for each user accessing this webserver.
I
> don't need to see that users are succesully logging in at all (the
security
> event log is rather cumbersome to extract anythig useful out of it) Since
> IIS is logging as well, I think that this is kind of redudant. However I
> can't seem to find a policy (either domain or local) that is dictating
that
> this shuld be logged. I have also not found any audit polices on the
server
> itself for the directories that users are accessing for web content. Any
> ideas? To me, writing an 3 events every second has to be taking a hit on
the
> server at some point. Let me know what your thoughts are though. Thx.
>
> - Nick Wilson
> nfwilson@hotmail.com
>
>



Relevant Pages

  • Re: RDP/TS GPO Settings - Users unable to logon
    ... If you have created these userspeople with domain admin privilege ... Most likely the helpdesk guys are logging on to a domain controller. ... Others will be denied because they are not allowed to logon locally ... Local Policies --> User Rights Assignment ...
    (microsoft.public.windows.server.active_directory)
  • Logon Interactively Error
    ... check page 21, the second post down. ... local policies, user rights, ALLOW LOGON THROUGH TERMINAL ... >I have read the posts about the interactive login text ...
    (microsoft.public.windowsxp.work_remotely)
  • Group membership are not correct after logon
    ... When a user logon on the domain the domain policies will not apply. ... When I look on the user registry key I see only the Group memberships from ... the mandatory profile and not from the groups from the domain. ...
    (microsoft.public.windows.server.active_directory)
  • RE: logon failure to a remote share with a virtual directory
    ... I finally understand the problem when I read the description of the Logon ... > The local policies on the file server for allow access from the network ... > I can't find what security setting I need to set for that user. ... When I put the user in the domain Admins group the virtual directory ...
    (microsoft.public.dotnet.framework.aspnet)
  • Can you apply IE settings to all profiles via GP or registry ?
    ... closed" in IE Advanced options for all user profiles that logon to a machine. ... Can I set this up in local policies or better yet since I have a Win2k AD ...
    (microsoft.public.win2000.active_directory)