Re: Access Denied not logged

From: Laura E. Hunter \(MVP\) (hunter(nospamplease)_at_sfs.upenn.edu)
Date: 06/03/04 

Date: Thu, 3 Jun 2004 09:08:56 -0400

Enabling auditing is a 2-part process. First you need to configure the
events that you want logged, as you've done in your GPO.

In the case of files/folders/printers, you also need to enable auditing on
the objects themselves in order for events to be recorded in the Security
Log:

http://www.microsoft.com/technet/security/guidance/secmod50.mspx 

-- 
******************************
Laura E. Hunter - MCSE, MCT, MVP
Replies to newsgroup only
"Jeffrey" <anonymous@discussions.microsoft.com> wrote in message 
news:352BDBC5-2376-4DB7-94A6-67FB717D8DCC@microsoft.com...
>I have about 70 Win2K Professional machines in a domain with one D.C.  I 
>set the group policy for the domain to log failures for all nine policies 
>as well as success on account logon events, account management, logon 
>events, and policy change.  "Access is denied" error messages are displayed 
>on the screen when attempting to access a folder without proper 
>permissions, but nothing shows up in the event viewer.  Any ideas?  Thanks.