Re: 677 events

From: Michael Bednarek (mb_at_tgm.com.au)
Date: 04/30/03

Next message: Johan: "Re: prevent copying file from share folder"
Previous message: Jason Garms [MSFT]: "Secure.exe problems after last auto upgrade"
In reply to: Romain Niccoli [MSFT]: "Re: 677 events"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Date: Wed, 30 Apr 2003 07:36:55 GMT

On Tue, 29 Apr 2003 20:23:08 -0700, "Romain Niccoli [MSFT]"
<romain@online.microsoft.com> wrote in
microsoft.public.win2000.security:

>Have you installed windows 2000 SP3 on this machine? These
>events were disabled by default in SP3. Check out
>http://support.microsoft.com/default.aspx?scid=kb;en-
>us;302879
>
>(They can be re-enabled by setting the registry key
>HKLM\CurrentControlSet\Services\Kdc\Parameters\AuditSpn to
>1)
>
>Romain.

Installing SP3 on NT5.0 didn't make any difference to events 677.
Turning off Account Logon auditing in Group Policy did.

[snip]

-- 
Michael Bednarek, IT Manager, Tactical Global Management
Waterfront Pl, Brisbane 4000, Australia. "POST NO BILLS"
http://mcmbednarek.tripod.com/

Next message: Johan: "Re: prevent copying file from share folder"
Previous message: Jason Garms [MSFT]: "Secure.exe problems after last auto upgrade"
In reply to: Romain Niccoli [MSFT]: "Re: 677 events"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]