Security Event

From: Krishna Kumar (anonymous_at_discussions.microsoft.com)
Date: 11/28/03 

Date: Fri, 28 Nov 2003 12:11:51 -0800

I have two site and two domain controllers and 50 machine
in Each site.The Auditing has been enabled domain wide. A
user from one site tries to guess the credidentials of
the user in the other site and the account gets locked
out. Will the event log on the other domain controller
get synchronised with the event. If so how often does
that and how ( I need to be very clear on the site attack
came from ). If possible please provide links to the
articles.Thanks In Advance

Relevant Pages

  • Re: Seeking location of User Log-in Log (Event viewer)
    ... If you enable this in the Auditing section of a group policy ... object that impacts the domain controllers, ... event log of the domain controller that handled the login. ...
    (microsoft.public.win2000.security)
  • Windows 2000 log retention
    ... I'm looking for a few suggestions or thoughts on Event Log retention. ... requirement to log all actions on the domain controllers, ... Given the size of the environment, the log file has to ...
    (Focus-Microsoft)
  • Re: Specifying AD server to authenticate against....
    ... Also what tool can i use to monitor other AD activities like this? ... I have been looking in the event log on each of my domain controllers but i would like to know if there is a better way. ... you can use NLTest to verify to which DC a client has a secure channel. ...
    (microsoft.public.windows.server.active_directory)
  • SAM problem with ID n° 16650
    ... Yesterday we suffered a major disaster and one of our domain controllers ... Because this server is our main file server and all users have manually ... However because this was a fresh install the SSID will have changed for the ... However we are now getting many Event 16650 appearing in the Event log. ...
    (microsoft.public.windows.server.active_directory)
  • Re: GPO Access is Denied Messages on DC
    ... -Netlogon and DFS services are started. ... -Domain controllers have the read and apply rights to the Domain Controllers Policy. ... 1001 is logged every five minutes in the Application event log ... Group Policy processing does not work and events 1030 and 1058 are logged in the Application log of a domain controller ...
    (microsoft.public.windows.server.active_directory)