Re: Domain Controller Not logging Security Audit Settings

From: Steven L Umbach (n9rou_at_attbi.com)
Date: 05/30/03 

Date: Fri, 30 May 2003 18:20:06 GMT

         For domain controllers you need to configure the domain controller
security policy. --- Steve

"ryan" <rmurphy@employocity.com> wrote in message
news:#QeshtqJDHA.1828@TK2MSFTNGP10.phx.gbl...
> Hello,
>
> My W2kAS domain controller is not logging the security audit as set in the
> Group Policy under Default Domain Policy / Computer Configuration /
Windows
> Settings / Security Settings / Local Policies nor will it accept / update
> Local Computer Policy / Windows Settings / Security Settings / Audit
Policy.
> Local Audit settings are correct but Effective settings remain flagged as
> "no auditing".
>
> However, all Group members have accepted and are logging the Audit
Settings
> as set in in the Group Policy on the Domain Controller. Any ideas what I
am
> doing wrong?
>
> thanks in advance. - Ryan
>
>

Relevant Pages

  • Failure audit events not being logged
    ... It's the only domain controller ... policy", so that the Success and Failuer of Account Logon and Logon Events, ... "Local Policies", "Audit policy"). ... Is there a bug related to the logging of failed logon attempts??? ...
    (microsoft.public.windows.server.security)
  • RE: [fw-wiz] what to turn on for solaris auditing
    ... e.g. we must turn on logging for all commands executed by root. ... > But have yet to identify what are the information to turn audit on. ... put it under some load--or roll out your desired auditing configuration ... performance without really enhancing system security. ...
    (Firewall-Wizards)
  • 2003 DC auditing issue
    ... I have Windows 2003 test machine, and I test auditing policies. ... 2003 Domain Controller, with default installation settings. ... If I configure all audit policies in “Default Domain Controllers Policy” to ... Audit Account Management) to Audit Success and Audit Failure, ...
    (microsoft.public.security)
  • Re: IDS on PIX 506e
    ... logging trap informational ... ip audit attack action alarm ... interface that the ip audit command is applied to? ...
    (comp.dcom.sys.cisco)
  • Re: Logging database changes
    ... I would not like to rely on a block within the record for audit purposes as ... Knowledgeable users could interfere ... When Exxon demanded audit trails of all changes I finished up putting a pair ... recompile and all programs were happily logging away. ...
    (comp.databases.pick)