Re: Security log problems Please Help!!
From: Eric Fitzgerald [MSFT] (ericf_at_online.microsoft.com)
Date: 05/31/03
- Next message: James Grace: "server automatic logon"
- Previous message: Eric Fitzgerald [MSFT]: "Re: EventID 560, how do I clean it up"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Sat, 31 May 2003 13:07:02 -0700
Disable the setting "audit the use of base system objects" in Local Security
Policy or group policy, and disable privilege use success & failure auditing
in audit policy.
Eric
"Dezignin" <mthomason@progresstank.com> wrote in message
news:OzUeaDfJDHA.3604@tk2msftngp13.phx.gbl...
> My security log is only showing
> Object access 562 and privileged use 578
> 562 pops up every minute so my long is now useless
> I know it's something I've done, but I don't know where to change this. I
> know it isn't in the filter so could someone point me in the direct of
where
> to set what gets logged and what doesn't. I've been getting a lot of
failed
> log on attempts on my TermSrv lately and know I can't see what is going
on.
> Thanks for any help
>
>
- Next message: James Grace: "server automatic logon"
- Previous message: Eric Fitzgerald [MSFT]: "Re: EventID 560, how do I clean it up"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|
