Re: Security log is blank?
From: Steven L Umbach (n9rou_at_nsattbi.com)
Date: 06/14/03
- Next message: Steven L Umbach: "Re: Recource Password, What Password?"
- Previous message: Phil: "Re: workstation administrator password"
- In reply to: Gregory: "Security log is blank?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Sat, 14 Jun 2003 01:55:00 GMT
Check the local security policy on that workstation to make sure
that logging is enabled in the "effective setting". I believe that nothing
will be shown in the log on the local computer unless a user logs into the
"local machine" and not the domain, if only audit account logon events is
enabled. It should show on a domain controller though when a user attepmts
to log into the domain. Try enabling auditing for logon events also if you
have not done such and make sure success and failure are enabled. I assume
the ex employee has his account disabled. He may have been trying to log in
with an account other that he used to have. --- Steve
"Gregory" <gtreadway@healthyarkansas.com> wrote in message
news:008801c331d4$61146460$a501280a@phx.gbl...
> My security log is blank on one particulary Win2k Pro PC
> and everytime this PC logs in to our network, there is
> nothing in our security logs (local pc or the sever) to
> show this. What is going on? I have set on the local pc
> and the server to show all login attempts, but nothing is
> showing. The security logs on this pc have not been
> cleared, they are just blank. The other logs seem to be
> working fine (application and system). I caught someone
> who used to work here trying to login, but I have no
> security logs to prove it. Any ideas?
- Next message: Steven L Umbach: "Re: Recource Password, What Password?"
- Previous message: Phil: "Re: workstation administrator password"
- In reply to: Gregory: "Security log is blank?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|