Logon Audit Issue

From: Jordan (Parker402_at_hillcrestfd.org)
Date: 07/10/04

  • Next message: alkoraishi: "Windows 2k Versus XP"
    Date: Fri, 9 Jul 2004 21:16:36 -0700
    
    

    I have spent a couple hours searching for an answer I
    have yet to find. I currently work on a Windows 2000
    Server that audits all Login attempts to each individual
    PC on our network. We recently had a computer crash and
    I wanted to review our latest users, but found that I can
    only access the audit files if I am able to connect to
    that PC. Since the PC crashed and the hard drive is
    shot, this is impossible.

    My question is how can I take those audit files and have
    them send the information to an "off-shore" computer
    (aka, the Windows 2000 Server) so that I can view the
    files remotely.

    To all potential responders, please note that I have
    tried the Console approach, but it will not let me Audit
    from the Server.


  • Next message: alkoraishi: "Windows 2k Versus XP"

    Relevant Pages

    • RE: database server audit tools
      ... For ongoing audit accountability and regulatory compliance via log ... Subject: database server audit tools ... please send me also some links to harden my database server from attacks.. ... Audit your website security with Acunetix Web Vulnerability Scanner: ...
      (Pen-Test)
    • RE: audit a terminal services session on W2K Advanced Server
      ... I understand that you want to enable the auditing for terminal server. ... Enable audit for rdp-tcp connection in Terminal Services Configuration. ... Event 683 for session disconnection ...
      (microsoft.public.win2000.security)
    • Re: Hacked
      ... *audit every account and group membership. ... and old or temp accounts reset or disable ... "Newell White" wrote in message ... I've done a full scan and the server is clean. ...
      (microsoft.public.security)
    • Re: Hacked
      ... *audit every account and group membership. ... and old or temp accounts reset or disable ... "Newell White" wrote in message ... I've done a full scan and the server is clean. ...
      (microsoft.public.security)
    • RE: Audit to track moving of folders
      ... SBS server. ... "Success" Audit object access, and only monitor the following activities on ... Microsoft CSS Online Newsgroup Support ...
      (microsoft.public.windows.server.sbs)