Re: Auditing Logons
From: krish shenoy[MS] (kshenoy@online.microsoft.com)
Date: 04/02/03
- Next message: Mel: "Certain updates causing system instability in Win2K Server"
- Previous message: yazan: "Found hacker's folder"
- In reply to: Andrew: "Auditing Logons"
- Next in thread: Andrew: "Re: Auditing Logons"
- Reply: Andrew: "Re: Auditing Logons"
- Reply: Andrew: "Re: Auditing Logons"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "krish shenoy[MS]" <kshenoy@online.microsoft.com> Date: Wed, 2 Apr 2003 13:43:43 -0800
Did you try this immediately. GP gets applied to all the machine in the
domain every 8hrs. You can make it get applied immediately by running
gpupdate /force
However there are multiple DCs then you will stay have to wait a short time
till replication has taken place. One way to check that the gpo has been
applied is to run rsop.msc
-- This posting is provided "AS IS" with no warranties and confers no rights. Use of any included samples is subject to the terms specified at http://www.microsoft.com/info/copyright.htm" "Andrew" <andrewb@nospam.avidityhcs.com> wrote in message news:022901c2f95c$1659da50$a201280a@phx.gbl... > I'm trying to audit logons to our domain but nothing is > showing up in the security event log. I went into Active > Directory Users and Computers, right clicked on the domain > and then clicked properties. Went to the Group Policy > tab, and the "Default Domain Policy" is the only one in > there and is highlighted. I clicked the Edit button, and > then went to Computer Configuration/Windows > Settings/Security Settings/Local Policy/Audit Policy and > then opened the "Audit Account Logon Events". I > checked "Failure" and then exited. > > Shouldn't this activate auditing? Am I missing > something? Thanks.
- Next message: Mel: "Certain updates causing system instability in Win2K Server"
- Previous message: yazan: "Found hacker's folder"
- In reply to: Andrew: "Auditing Logons"
- Next in thread: Andrew: "Re: Auditing Logons"
- Reply: Andrew: "Re: Auditing Logons"
- Reply: Andrew: "Re: Auditing Logons"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]