Re: Auditing Logons

From: Andrew (andrewb@nospam.avidityhcs.com)
Date: 04/03/03 

From: "Andrew" <andrewb@nospam.avidityhcs.com>
Date: Wed, 2 Apr 2003 14:37:30 -0800

I tried using that command and it wouldn't work, so I used
the old secedit command:
secedit /refreshpolicy machine_policy /enforce

Even after after running this command, I still don't see
anything in my event log. If this command doesn't work
anymore for some reason, what is the full syntax of the
gpupdate command?

>-----Original Message-----
>Did you try this immediately. GP gets applied to all the
machine in the
>domain every 8hrs. You can make it get applied
immediately by running
>gpupdate /force
>However there are multiple DCs then you will stay have to
wait a short time
>till replication has taken place. One way to check that
the gpo has been
>applied is to run rsop.msc
>
>
>--
>This posting is provided "AS IS" with no warranties and
confers no rights.
>Use of any included samples is subject to the terms
specified at
>http://www.microsoft.com/info/copyright.htm"
>"Andrew" <andrewb@nospam.avidityhcs.com> wrote in message
>news:022901c2f95c$1659da50$a201280a@phx.gbl...
>> I'm trying to audit logons to our domain but nothing is
>> showing up in the security event log. I went into
Active
>> Directory Users and Computers, right clicked on the
domain
>> and then clicked properties. Went to the Group Policy
>> tab, and the "Default Domain Policy" is the only one in
>> there and is highlighted. I clicked the Edit button,
and
>> then went to Computer Configuration/Windows
>> Settings/Security Settings/Local Policy/Audit Policy and
>> then opened the "Audit Account Logon Events". I
>> checked "Failure" and then exited.
>>
>> Shouldn't this activate auditing? Am I missing
>> something? Thanks.
>
>
>.
>