Re: Domain Controller Not logging Security Audit Settings

From: Steven L Umbach (n9rou_at_attbi.com)
Date: 05/30/03 

Date: Fri, 30 May 2003 18:20:06 GMT

         For domain controllers you need to configure the domain controller
security policy. --- Steve

"ryan" <rmurphy@employocity.com> wrote in message
news:#QeshtqJDHA.1828@TK2MSFTNGP10.phx.gbl...
> Hello,
>
> My W2kAS domain controller is not logging the security audit as set in the
> Group Policy under Default Domain Policy / Computer Configuration /
Windows
> Settings / Security Settings / Local Policies nor will it accept / update
> Local Computer Policy / Windows Settings / Security Settings / Audit
Policy.
> Local Audit settings are correct but Effective settings remain flagged as
> "no auditing".
>
> However, all Group members have accepted and are logging the Audit
Settings
> as set in in the Group Policy on the Domain Controller. Any ideas what I
am
> doing wrong?
>
> thanks in advance. - Ryan
>
>

Relevant Pages

  • Failure audit events not being logged
    ... It's the only domain controller ... policy", so that the Success and Failuer of Account Logon and Logon Events, ... "Local Policies", "Audit policy"). ... Is there a bug related to the logging of failed logon attempts??? ...
    (microsoft.public.windows.server.security)
  • RE: [fw-wiz] what to turn on for solaris auditing
    ... e.g. we must turn on logging for all commands executed by root. ... > But have yet to identify what are the information to turn audit on. ... put it under some load--or roll out your desired auditing configuration ... performance without really enhancing system security. ...
    (Firewall-Wizards)
  • 2003 DC auditing issue
    ... I have Windows 2003 test machine, and I test auditing policies. ... 2003 Domain Controller, with default installation settings. ... If I configure all audit policies in “Default Domain Controllers Policy” to ... Audit Account Management) to Audit Success and Audit Failure, ...
    (microsoft.public.security)
  • Re: IDS on PIX 506e
    ... logging trap informational ... ip audit attack action alarm ... interface that the ip audit command is applied to? ...
    (comp.dcom.sys.cisco)
  • Re: [PATCH] Audit: Add TTY input auditing
    ... it should audit the actions performed by the sysadmin. ... This is what's called out for in various security standards such as NISPOM, ... that keyboard logging is not an appropriate mechanism for security ... not helpful to meeting security audit requirements. ...
    (Linux-Kernel)