Re: Audit login times

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 01/05/04


Date: Mon, 05 Jan 2004 21:50:18 GMT

I am not sure of what you mean by reloaded, but try secedit /refreshpolicy
machine_policy /enforce. Also check the Local Machine Policy to see if the
"effective" setting is what you expect that would indicate that the policy has been
inherited. If troubles persist try running netdiag and dcdiag on the domain
controller looking for any failed tests that may indicate a misconfiguration
issue. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;it;227302

"John C. Weldin" <jweldin@focusbsi.com> wrote in message
news:OAjhi380DHA.2480@TK2MSFTNGP10.phx.gbl...
> I only have one server, and I checked the security log, and there is nothing
> in it.
>
> I modified the Domain Security Policy in Administrative Tools. I reloaded
> the policy after I modified it. Should the server have been restarted?
> "Ozone" <rs_dovers@yahoo.com> wrote in message
> news:usKB5b70DHA.2572@TK2MSFTNGP12.phx.gbl...
> > Be sure that you are looking in the Security log on the DC that was used
> by
> > the client for the login.
> >
> > Ozone
> > "John C. Weldin" <jweldin@focusbsi.com> wrote in message
> > news:eSgrha50DHA.2528@TK2MSFTNGP09.phx.gbl...
> > > I setup auditing in the domain security policy to log when users
> > > successfully logon; however, I do not see the events in the event
> viewer.
> > Am
> > > I missing something?
> > >
> > >
> >
> >
>
>



Relevant Pages

  • Re: HELP!!! Unable to logon to Server 2000
    ... Is there a way that I can fix this problem from my PC ... replicated to from the problem server that won't allow me ... having access to the Domain security policy. ...
    (microsoft.public.win2000.security)
  • Re: Password must meet complexity requirements
    ... On the server where you're performing these tests, ... Tools -> Domain Security Policy. ... Systems Administrator ...
    (microsoft.public.windows.server.active_directory)
  • Re: trace user logons
    ... Check to see what the "Effective Setting" is under the "Audit Policy" on one ... of your servers or workstations. ... i had several of the local audit policies enabled under Domain ... I've checked the filter on the security log, and it is set to show ...
    (microsoft.public.windows.server.security)
  • Re: GPO OBJECT ACCESS
    ... With the computer in your OU and when you run gpresult on that computer it ... Another thing to consider is that by default the security log ... I would also check the Local Security Policy on the computer you put into ... what is going on with Group Policy for a certain computer/user/OU/GPO. ...
    (microsoft.public.win2000.group_policy)
  • How do I read the Security Log
    ... Enable Auditing for Logon Events and Object Access ... This logs events in the security log informing you if IKE ... Using the Group Policy MMC snap-in, ... Enable success and failure auditing for "Audit logon ...
    (microsoft.public.win2000.security)