Re: Auditing Logons

From: Daniel Billingsley (dbillingsley@NO.durcon.SPAAMM.com)
Date: 04/04/03


From: "Daniel Billingsley" <dbillingsley@NO.durcon.SPAAMM.com>
Date: Thu, 3 Apr 2003 17:09:47 -0500


You're only logging failures, so did you purposely create a failure event or
just log in like normal?

"Andrew" <andrewb@nospam.avidityhcs.com> wrote in message
news:022901c2f95c$1659da50$a201280a@phx.gbl...
> I'm trying to audit logons to our domain but nothing is
> showing up in the security event log. I went into Active
> Directory Users and Computers, right clicked on the domain
> and then clicked properties. Went to the Group Policy
> tab, and the "Default Domain Policy" is the only one in
> there and is highlighted. I clicked the Edit button, and
> then went to Computer Configuration/Windows
> Settings/Security Settings/Local Policy/Audit Policy and
> then opened the "Audit Account Logon Events". I
> checked "Failure" and then exited.
>
> Shouldn't this activate auditing? Am I missing
> something? Thanks.