Re: Difference Between Audit Logon Events and Audit Account Logon Events
From: Joe Richards [MVP] (humorexpress_at_hotmail.com)
Date: 05/02/03
- Next message: Jerold Schulman: "* Newsgroup doc. and 6644 Tips, Tricks, and Registry Hacks - 01-May-2003 08:50.45 *"
- Previous message: The Head Mushroom: "GUID"
- In reply to: James Minard: "Difference Between Audit Logon Events and Audit Account Logon Events"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Thu, 1 May 2003 21:09:37 -0400
Check out
http://msdn.microsoft.com/library/en-us/gp/518.asp
and
http://msdn.microsoft.com/library/en-us/gp/515.asp
Quickly though
Audit Logon Events generates audit events for every interactive or network logon directly to a machine. So if a user
connects to say a network share on the machine or logs on at the desktop.
Audit Account Logon Events generates audit events for every authentication a DC handles on behalf of another machine,
like when a user is logging into a workstation with a domain ID. Basically it means that the DC had the account that was
used in its database. It doesn't mean shared resources on the DC were accessed though they were most likely were but you
would see those access (say for sysvol or netlogon access) hits under the other audit category.
-- Joe Richards www.joeware.net -- "James Minard" <jminard@precisioncs.net> wrote in message news:uwJZRa$DDHA.2704@TK2MSFTNGP11.phx.gbl... > Which one of these two events is more appropriate to use when you want to > monitor successful logons by users, or should they both be turned on? What's > the difference between the two? > > > -- > James Minard, MCP > Network Technician > Precision Computer Solutions > >
- Next message: Jerold Schulman: "* Newsgroup doc. and 6644 Tips, Tricks, and Registry Hacks - 01-May-2003 08:50.45 *"
- Previous message: The Head Mushroom: "GUID"
- In reply to: James Minard: "Difference Between Audit Logon Events and Audit Account Logon Events"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|
